Huh? What’s the problem? I recently paid for someone’s subscription – method was [ol][li]“someone” changed their password to, say, “123456” (actually, something else more truly resembling a password)[]… e-mailed me the new password []… I logged on as “someone”, using the e-mailed password, and paid for their subscription [*]… I e-mailed “someone” a “mission accomplished” note [/li]AND (presumably) [li]… “someone” changed their password yet again. [/ol][/li]
Sure, it’s a question of trust – I could theoretically have hijacked the account by changing the password and the e-mail address and then reactivating, effectively locking “someone” out. But as long as the two-party trust is there, I don’t see the problem vis-a-vis the rest of the world.
Dani