I use a help desk system and am wondering, since passwords are often sent via email and since it's pretty easy for criminals to ask for passwords (pretending to the the admins), do you guys think it's better to turn off email replying? I have my system set up so they can reply to tickets, but am contemplating disabling it totally and make them use the web support page to log in and send tickets.

What are your thoughts on this?

Email is a required when asking for support, I always like typing out my support questions in email instead of some support form.