https://bugzilla.wikimedia.org/show_bug.cgi?id=34590
--- Comment #19 from Bawolff <[email protected]> 2012-03-06 15:41:39 UTC --- >I'm not really a fan of this idea. It just seems wrong (in a gut feeling kind >of way; Don't really have a logical reason) to use email as a log in >credential. Well actually, here is my more rational reason [note, part of this is repeating things other people have said]. MediaWiki assumes emails are: * Not unique * Secret I doubt its possible to maintain these two assumptions, and use them as a login credential. At best you could maybe only reveal other people with the same email address to a person who has proven they know the password to one of the accounts with the email given. Even that seems icky, albeit perhaps acceptable as most accounts with same email belong to same person (Generally that happens for people with bot accounts, or accounts they use only in internet cafes). --- What about using the user id as an alternative login credential. I could log in to wikipedia by putting "#108308" into the username box, and my pass in the password box. Some other parts of mediawiki already support #<user_id> in place of username. (Like Special:Userrights. However, special:unblock does use that syntax to mean something else) The downside to this approach would be: *User's generally have their email memorized already. Once someone is having trouble logging in, its too late to tell them "go to special:preferences and look up your id" *user id's are hard to memorize compared to emails. *Its unclear if there is a good way to inform/advertise to the user that they can log on with their user id. Cheers, Bawolff -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
