Problem
Many websites require users to register before they can access information or services. Suppose that you register at such a website, but when you return later you've forgotten your password. The website then asks you to enter your email address, which you do. Later, you receive your original password via email.
a. Discuss several security concerns with this approach to dealing with forgotten passwords.
b. The correct way to deal with passwords is to store salted hashes of passwords. Does this website use the correct approach?