Re:Rethinking email confirmation
by LindenRyuujin on Thursday December 08, 2016 @04:11AM
(#13129259)
No, you are incorrect. What you propose wouldn't stop the situation described at all.
From the article:
> What happened?
> Well, turns out that the person that actually owned the [email protected] was a kid that was curious and clicked the email from TheService asking him to verify his email address.
> He himself forgot about this until a couple of years later when he heard about TheWebsite from some friends, and decided to try it. He tried to create an account and got an “account already exists” error. He used the password reset functionality and that’s that. He now owns the original John Smith’s account.
From the article:
> What happened?
> Well, turns out that the person that actually owned the [email protected] was a kid that was curious and clicked the email from TheService asking him to verify his email address.
> He himself forgot about this until a couple of years later when he heard about TheWebsite from some friends, and decided to try it. He tried to create an account and got an “account already exists” error. He used the password reset functionality and that’s that. He now owns the original John Smith’s account.