GRC 10 transmission of user credentials

Hello

We currently have GRC 5.3 and one of the vulnerabilities of that system is that for new user accounts and password self-service communications, the username and passwords are transmitted via un-secured SPML.  I am aware of the ability to transmit a link to display the password and while this is a little better than unencrypted email transmission it still is not ideal.

My question is does GRC 10 address this?  How are user credentials transmitted for new IDs and password self-service in 10?

Thank you,

Jon Schmidt