I'm having the same problem, and while I think I understand what you are saying, I can't get it to work. I have the folowing lines in my config.web:
<
membership userIsOnlineTimeWindow="45"><
providers><
add name="AspNetSqlProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
minRequiredPasswordLength="4"
minRequiredNonalphanumericCharacters="0"
connectionStringName="ASPNETDB"
enablePasswordRetrieval="false"
enablePasswordReset="true"
requiresQuestionAndAnswer="false"
requiresUniqueEmail="false"
passwordFormat="Hashed" />
</
providers></
membership>
But it gives a warning for all the attributes except name and type, saying they are not declared. So, when I try my application, it works, but none of those attributes are in place (ie still requires strong passwords).
Any idea what I should do?