The Drupal Association staff and Drupal community did an amazing and transparent job in handling the recent security breach where user account and personal data got into the wrong hands. However, what haven't been addressed yet is the resulting sitewide password reset. What can we learn from that? How did drupal.org users experience it? What will happen if it would have been another site?

Do we need a sitewide password reset feature in Drupal Core?

That and other things is being discussed in this post, including how the Drupal community can take advantage of this unique opportunity to prepare for the next time it happens.

Read the full "Much to Learn From the drupal.org Password Reset" post on www.tsvenson.com