https://bugzilla.wikimedia.org/show_bug.cgi?id=34590

Bawolff <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|need-review                 |reviewed
                 CC|                            |[email protected]

--- Comment #12 from Bawolff <[email protected]> 2012-03-05 03:16:02 UTC ---
I'm not really a fan of this idea. It just seems wrong (in a gut feeling kind
of way; Don't really have a logical reason) to use email as a log in
credential.

I would much prefer we provided an on-screen keyboard type thing, or some other
solution, to allow people to actually type their username, rather then letting
people log in with email.

----
In regards to the patch:
*For future reference, don't worry about any of the translation files except
for english (and qqq). Non-english translations are handled elsewhere by a
different group of people (translatewiki).
*The patch doesn't actually work because it tries to apply title normalization
to the user's input, but emails aren't usually title normalized (aka emails
often start lowercase, but the code in patch capitalizes first letter. ditto
for underscore).
*Type an email in special:contributions. You can now given an email, associate
a user with that email. That's a bad thing (emails are supposed to be secret).


Some far fetched things to double check:
*What if someone has an @ in their name. (Illegal since a very long time, but
potentially some legacy users, not sure about that. Probably something not to
worry about)
*Will this interfere with using @ to denote what wiki the user is at in some
cross wiki rights things (I doubt it, but i don't really know how those cross
wiki rights things work, so should be double checked)
*What about someone trying every possible email in the login form to see which
ones they get "No such users" and which ones they get "password wrong" and then
uses that to make a list of email addresses for spamming purposes (yes there's
the throttle thing, but still kind of scary possibility)


-----
Marking patch as reviewed do to the above mentioned issues.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to