I remember it being brought up, but I totally forgot what happened.
Wordpress can allow people to sign-up for an account on say, Ardra or PSI. To do so, it sends e-mail verification on sign-up... also, for lost passwords... As I recall, you have the servers *not* do any automatic e-mailing.
Though I thought there was a work around for that, especially if the e-mail was not through Xepher....
Can you refresh my memory on the whole matter?