Email address change should have better confirmation

Thoughts on the further development of Haven & Hearth? Feel free to opine!
User avatar
ramoness
Posts: 30
Joined: Sat May 04, 2013 10:01 am

Re: Email address change should have better confirmation

Post by ramoness »

Well in that case that had probably nothing to do with HnH, but with your base e-mail account security. I'm sure in that cases, which would be rare, admins could lookup to the situation and if needed, changed it if they had proofs that you are the one.

Its just with such action we would avoid stealing accounts and not returning and at the end, also probably selling them.
SuperNoob
Posts: 521
Joined: Sat May 11, 2013 1:41 am

Re: Email address change should have better confirmation

Post by SuperNoob »

ramoness wrote:but with your base e-mail account security.
you're forgetting about people switching ISPs who signed up with the email adress from their ISP. so say you use companyX for internet, but they go way up on the price or they've had crappy service lately so you switch to CompanyY. you signed up with your adress@companyX and no longer have access to that account, you need to change your password for some reason(whatever it may be) and now you can't because you couldn't change your email adress from an account that no longer exists...

adding a confirmation(old email adress and PW or a security question like Borka suggested) works better than completely getting rid of the system.
mvgulik
Posts: 4094
Joined: Fri May 21, 2010 2:29 am

Re: Email address change should have better confirmation

Post by mvgulik »

2. Enter the new email and current password
3. Press OK, which sends a mail to the new email
Wow. :shock:

:lol:

Seriously dislike the general security question scheme's.
mvgulik
Posts: 4094
Joined: Fri May 21, 2010 2:29 am

Re: Email address change should have better confirmation

Post by mvgulik »

Phaen wrote:edit: Not sure what exceptions can be made about lost old email access :s is this a common problem?
That should always involve some administrator involvement. (User is responsible to take care of not losing access to his e-mail accounts. CQ: Changing the registrations that use that e-mail before its canceled.)
User avatar
borka
Posts: 9965
Joined: Thu Feb 03, 2011 7:47 pm
Location: World of Sprucecap

Re: Email address change should have better confirmation

Post by borka »

mvgulik wrote:
2. Enter the new email and current password
3. Press OK, which sends a mail to the new email
Wow. :shock:

:lol:

Seriously dislike the general security question scheme's.
works aslong you know the pw ...
mvgulik wrote: That should always involve some administrator involvement. (User is responsible to take care of not losing access to his e-mail accounts. CQ: Changing the registrations that use that e-mail before its canceled.)
mv sometimes life ain't that easy :cry:

Return to “Critique & Ideas”