Administrivia: Some new account security options

[maze]

One of the reasons people account share is to have access to a universal town alt.

It would be nice if we could share an alt from the account page with other people - that would get rid of the problem entirely.

a few options would be nice
give someone permissions by adding their account name to the alt.
give a group of players access to your alt (set a color or many- anything other then white)
give a town access to your alt (set a color or many- anything other then white)

[MagicManICT]

@loftar: that is exactly what I was looking for. Sorry for the way the question was worded. It read differently in my mind when I posted it.

[APXEOLOG]

@loftar nice feature, but can we maybe do a step forward and introduce 2 changes:
1. Add a button to generate a new token directly from the web page (without downloading autohaven)
2. Add a button to show the token itself so that it can be copied

With this approach, we will be able to change the custom client's login saving to rely on tokens instead of logins and passwords.
The use-case scenario will be:
1. User A wants to share access with user B
2. User A goes to his security settings and generates a new token by pressing "Create new security token" (imagine that he also adds a comment for it: "for my best friend B")
3. User A hits the "Show token" button, copies it, and send it to his friend B
4. User B stores this token in his custom client and uses it to access the game
5. When user A wants to stop sharing he goes to his security settings and revokes specific token (this is where the comment can be helpful)

[KwonChiMin]

One of the reasons people account share is to have access to a universal town alt.

If i understand new system correctly - u now can just share tokened jar file of said alt for everyone in your village. And if someone should be excluded - just reissue new token.

[VDZ]

@loftar nice feature, but can we maybe do a step forward and introduce 2 changes:
1. Add a button to generate a new token directly from the web page (without downloading autohaven)
2. Add a button to show the token itself so that it can be copied

With this approach, we will be able to change the custom client's login saving to rely on tokens instead of logins and passwords.
The use-case scenario will be:
1. User A wants to share access with user B
2. User A goes to his security settings and generates a new token by pressing "Create new security token" (imagine that he also adds a comment for it: "for my best friend B")
3. User A hits the "Show token" button, copies it, and send it to his friend B
4. User B stores this token in his custom client and uses it to access the game
5. When user A wants to stop sharing he goes to his security settings and revokes specific token (this is where the comment can be helpful)

On a separate note, account sharing is never supported, and is by far the number one reason for security breaches**

[shubla]

On a separate note, account sharing is never supported, and is by far the number one reason for security breaches**

But people are still going to share accounts.
In Finland, syringes are given to IV drug users, even though possessing and using IV drugs is illegal. It is done to decrease the potential harm from usage, because some people are still going to do it.
So why not do the similar in HnH?

[Ysh]

On a separate note, account sharing is never supported, and is by far the number one reason for security breaches**

But people are still going to share accounts.
In Finland, syringes are given to IV drug users, even though possessing and using IV drugs is illegal. It is done to decrease the potential harm from usage, because some people are still going to do it.
So why not do the similar in HnH?

Some men will look at both cases and consider it to be enabling bad behavior.

[loftar]

To be clear, I don't think all cases of character-sharing are bad. Just which ones are and aren't can certainly be debated, but I don't think it's an intrinsic evil. By far the main problem is sharing of accounts, moreso than characters per se. That's not to say that sharing of characters is entirely unproblematic, both in terms of game mechanics and in terms of security, but we have in fact lightly considered implementing some form of more formal sharing of characters between accounts at times. It's more complex than it might seem at first glance, though, the aesthetics of it are less than obvious, and we do have higher-priority items to work on, but it's not entirely off the table.

I'm not sure I want to be seen as encouraging account-sharing by implementing the suggested changes, but it could at least be a step forward, and I could consider implementing it if only to better support custom clients. I'll have to think about it, and also have no lack of things to work on for the reset, but I'll keep it in mind.

[Sevenless]

I agree that account sharing is intrisically risky, but at the same time the nature of haven makes character sharing incredibly useful. Supported or not, encouraged or not, it's always going to be happening.

I wouldn't worry about it too much. The idea of character sharing as an ingame supported mechanic tickled my fancy though.

[iamahh]

wait nvm