have you considered asking for password confirmation on signup?

I thought about it but I rejected the idea. Firstly because I want to keep the number of fields to a minimum. Secondly because I'm not convinced that those "confirm your... whatever" fields actually accomplish much (although I can see more value in a "confirm your password" field than a "confirm your email address" field).

I think the presence of the "forgotten your password?" link takes care of the contingency that someone incorrectly entered their password to begin with. They can click that link and request a reset link to be sent to their email address. But I believe that those people would be in the minority so rather than make everyone confirm their password to begin with, I think it's best to deal with the edge cases as they arise.

I think that these kind of sign-up details need to be handled on a site-by-site basis. I don't think there's a right or wrong way to do it for all sites—it depends on the audience. Given the tech-savvy nature of the main activity on Huffduffer (podcasting), I'm going to assume a reasonable level of tech-savviness on the part of the people signing up for it.

If I'm proven wrong and lots of people are entering their chosen passwords incorrectly in the sign-up form, I'll amend it accordingly. Time will tell.