Well in that case that had probably nothing to do with HnH, but with your base e-mail account security. I'm sure in that cases, which would be rare, admins could lookup to the situation and if needed, changed it if they had proofs that you are the one.
Its just with such action we would avoid stealing accounts and not returning and at the end, also probably selling them.
-
ramoness
- Posts: 30
- Joined: Sat May 04, 2013 10:01 am
-
SuperNoob
- Posts: 521
- Joined: Sat May 11, 2013 1:41 am
Re: Email address change should have better confirmation
you're forgetting about people switching ISPs who signed up with the email adress from their ISP. so say you use companyX for internet, but they go way up on the price or they've had crappy service lately so you switch to CompanyY. you signed up with your adress@companyX and no longer have access to that account, you need to change your password for some reason(whatever it may be) and now you can't because you couldn't change your email adress from an account that no longer exists...ramoness wrote:but with your base e-mail account security.
adding a confirmation(old email adress and PW or a security question like Borka suggested) works better than completely getting rid of the system.
-
mvgulik
- Posts: 4094
- Joined: Fri May 21, 2010 2:29 am
Re: Email address change should have better confirmation
Wow.2. Enter the new email and current password
3. Press OK, which sends a mail to the new email
Seriously dislike the general security question scheme's.
-
mvgulik
- Posts: 4094
- Joined: Fri May 21, 2010 2:29 am
Re: Email address change should have better confirmation
That should always involve some administrator involvement. (User is responsible to take care of not losing access to his e-mail accounts. CQ: Changing the registrations that use that e-mail before its canceled.)Phaen wrote:edit: Not sure what exceptions can be made about lost old email access :s is this a common problem?
-
borka
- Posts: 9965
- Joined: Thu Feb 03, 2011 7:47 pm
- Location: World of Sprucecap
Re: Email address change should have better confirmation
works aslong you know the pw ...mvgulik wrote:Wow.2. Enter the new email and current password
3. Press OK, which sends a mail to the new email![]()
![]()
Seriously dislike the general security question scheme's.
mv sometimes life ain't that easymvgulik wrote: That should always involve some administrator involvement. (User is responsible to take care of not losing access to his e-mail accounts. CQ: Changing the registrations that use that e-mail before its canceled.)