News for hackers. Stuff that matters.
Re:Let’s talk about usernames by neltnerb on Monday February 12, 2018 @01:51AM (#16357011)
Oh, I assumed the recommendation was to store the actual email address as entered, and then also generate the fingerprint to compare for similarity. Wouldn't you just keep both?
Re:Let’s talk about usernames by mhandley on Monday February 12, 2018 @05:33AM (#16357791)
The problem is that [email protected] and [email protected] can be different people, or [email protected] and [email protected]. On gmail, they can't, but on my university email system for example, this is the default naming convension for circa 50,000 people. If you consider them to be the same, one of them can't sign up to your service. How often this happens? Probably not all that often. But if you run a popular service, it will bite a few people.