One of the main reasons I'm not totally sold on a clear-text password warning is because we don't have agreement on removing that ability anytime soon, not to mention Bruce's point about the debate extending into mid-March.
Okay, we are now safely past last March :). Any further thoughts on this? My preference is still warn by default, but I could also be on board with ignore by default.
Nathan, I'm not sure that having a concrete resolve to someday remove cleartext passwords should be a blocker to warning now that they are a bad idea, but open to discussion there.
