https://bugzilla.wikimedia.org/show_bug.cgi?id=28085

--- Comment #21 from Tyler Romeo <[email protected]> ---
(In reply to comment #20)
> Just a note: if an email matches many accounts, it may be possible to spare
> the
> user from selecting his/her desired account, if the password entered matches
> only one of the accounts. I mean: if the user enters his/her email and
> password, and 3 accounts match the email, but only one matches the password,
> then it's safe to assume that the user wants to log in to that account, not
> the
> others. However this may not always work, because many users will also repeat
> their passwords.

That's not a viable solution due to security. The username and password should
be a 1-1 association, meaning you *must* have both in order to login. The only
time it would be OK to let people log in with email is if only one account has
that email.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to