Re:SecureLogin Authentication Protocol 1.0
by zwily on Sunday June 04, 2017 @12:55PM
(#14482360)
I tried the "Change SecureLogin" flow, and it's not obvious to me how that works if I'm changing my master password. It lets me select a new profile from within the app, but won't that also change my email address?
[ Parent
| on HN ]
Right now email is not changed, because it's not used as primary key, it's just a label like your fullname.
After you changed you can get into the same account using your 2nd profile only. Ignore the email: site owners are free to confirm it, but playground does not.
I did try to create a new profile with the same email address and it didn't let me, so it does appear to be treating it sort of like a primary key.
And if it's just a label, then maybe it should be advertised as such. I see what you're saying now, but that's not obvious from the app.