Asked By Kjell B.
11-Oct-09 01:48 PM

Hi,
I have recently received a couple of mails from Microsoft Support
[postmaster@live.com] about resetting the Windows Live password.
In the mail, I am instructed to either confirm the reset by copying a
link into my browser or to cancel the reset by copying another link.
I did not request a reset, so I guess someone is after my account.
Now, I find it insecure to copy a link like that to cancel the reset.
Isn't it just better to ignore the reset request? How do I know it is
not a fishing attempt? I have no problems to log in to my account. I
have done so and changed the password after the mail about the reset
request.
Isn't there a way to cancel the reset from inside Windows Live once I
have logged in? That would feel a lot more secure as I can actually log
in as I have my password available and working.
What is the benefit of actively canceling the request as opposed to just
ignoring it?
Why is this email from postmaster sent to the email address for which
the reset is requested and not to the alternate email address? If I need
a reset because I cannot access my account, I cannot read the email
anyway, can I?
Confused...
--
Kjell