I wish they raised a specific membership exception instead of an HttpException, it doesn't seem right to catch every HttpException there so I was trying to check the message but localized error messages throws it off.
I'll ponder about it, if you have any suggestions let me know.
Changing that site setting should be an infrequent event but it would be nice to not have a user see this error just because they happened to be trying to recover their password at the very moment this setting is changed. I don't see it as a huge problem but if we can think of a reasonable easy solution it would be nice.
Thanks,
Joe