News for hackers. Stuff that matters.
Re:Should I implement email verification during sign up? by OldSamaritan on Wednesday April 28, 2021 @06:32PM (#26975085)
Instead of verification, you could use the emailaddress as a login-method. Don't use passwords, but let the users login by email, sending a mail with a time-limited authentication-token and make them login that way.

That way you don't have to deal with passwords, and you will know the user has a mailbox which they control.

Re:Should I implement email verification during sign up? by randomlurking on Wednesday April 28, 2021 @06:49PM (#26975243)
I’ve thought about this method. I think this is what should be done for sites where you log in very infrequent (say, yearly). Do you know of any examples where this is implemented?
Re:Should I implement email verification during sign up? by OldSamaritan on Thursday April 29, 2021 @01:37AM (#26977791)
https://medium.com uses it. And I'm working on a little project myself which will use this way of login.

About the frequency: there aren't many situations where a user has access to your application, but not to email. I've been thinking about that, but when you have access to a browser, (most of the times) you have access to your mail.

Re:Should I implement email verification during sign up? by skinnymuch on Thursday April 29, 2021 @11:13AM (#26982214)
I despise this method. I rarely have such a negative instinctive take on minor tech things. The annoyance of having to click an email link though does it for me.