I consider Double Fine's forum accounts to be site-wide account credentials, even though it's all on forums.doublefine.com, because they have a login form for them on the index page (and a broken link to registration)
Registration includes (per #175) a "send me news and updates" checkbox
Input trims password (#233): inputting a as a password came back with a and "must be at least 3 characters"
trying to go anywhere before validating the email redirects to https://forums.doublefine.com/register/?do=validating (actually, login directs to a broken page with a normal header, and going anywhere valid redirects)
following a reset link twice gives the same error, logged in or not
Password appears to be truncated (#233): adding a character to the end of the 9000+ long password was still accepted for login
resetting a password doesn't trigger a change notification, only changing it via settings
I consider Double Fine's forum accounts to be site-wide account credentials, even though it's all on forums.doublefine.com, because they have a login form for them on the index page (and a broken link to registration)
Registration includes (per #175) a "send me news and updates" checkbox
Input trims password (#233): inputting
aas a password came back withaand "must be at least 3 characters"trying to go anywhere before validating the email redirects to https://forums.doublefine.com/register/?do=validating (actually, login directs to a broken page with a normal header, and going anywhere valid redirects)
following a reset link twice gives the same error, logged in or not
Password appears to be truncated (#233): adding a character to the end of the 9000+ long password was still accepted for login
resetting a password doesn't trigger a change notification, only changing it via settings
reset works fine while logged in