[nsgi]

Just because it's trivial doesn't mean all websites are doing it.

[ss248]

Some sites store passwords as plain text. And?

But if care about security, you might as well solve the problem properly instead of wasting your time implementing "your password must have a capital letter and a number" snake-oil features which only annoy your users.