Am I understanding correctly that the password is bound to the name and that if you know the password, then you own the name?
If so, then this is a major security flaw, as there is truly no way to transfer ownership of a name from one user to another user (since they both must know the password).
Please tell me I'm misunderstanding it.
If the 2nd person knows the password then it means that the 1st one revealed it. Who r we to decide what account owners r allowed to do with their passwords?
I believe xibeijan's concern is that if you were to sell the Alias, and give the buyer your Nxt account password, you (seller) would still have access to the account since you know the password of the Nxt account.