oops I was wrong, sorry. :) Looks like your password is not sent via clear text either, I see encryption being used in the e-mail headers when I do password recovery. Even on old pw recovery e-mail.