News for hackers. Stuff that matters.
Re:Why don’t we do email verification in reverse? by weird-eye-issue on Sunday August 21, 2022 @02:09AM (#32537806)
ImprovMX does this just fine
Re:Why don’t we do email verification in reverse? by cx42net on Monday August 22, 2022 @05:02AM (#32549018)
That's crazy! I was reading the article and kept in mind what we did in ImprovMX and was surprised to see we were mentioned in the comment :D

We did, tried something "original" in the login part, by offering a "one time login link" to our users instead of the standard flow. To be honest, we believe this was a bad idea.

The flow in itself is good and works fine (supposing email delivery works), but as @simonw perfectly said it, "resist the temptation to innovate around login!".

Offering that original "one time login link" is a frequent cause of support request because some users doesn't receive it, doesn't know what to do or how. They are not used to a change on login and this causes more troubles down the road than a standard flow.

That's why we later on decided to add the standard "password" login and tried to reverse that original flow. We still have users that have accounts with no password set though (still connecting via the original "one time login link").

Re:Why don’t we do email verification in reverse? by melony on Sunday August 21, 2022 @03:05AM (#32538010)
Obviously a webmaster knows how a sign up form works.
Re:Why don’t we do email verification in reverse? by weird-eye-issue on Sunday August 21, 2022 @03:13AM (#32538035)
I didn't know the word webmaster still existed
Re:Why don’t we do email verification in reverse? by innocenat on Sunday August 21, 2022 @02:26AM (#32537866)
ImprovMX was extremely confusing to me at first.
Re:Why don’t we do email verification in reverse? by weird-eye-issue on Sunday August 21, 2022 @02:59AM (#32537991)
Checking your email for the login link was confusing?
Re:Why don’t we do email verification in reverse? by bombcar on Sunday August 21, 2022 @03:06AM (#32538018)
I hate the email login link stuff, and any site that has it as the only option, I move on unless absolutely forced to use it.

Especially a pain if I'm trying to login on a device without my email.

Re:Why don’t we do email verification in reverse? by weird-eye-issue on Sunday August 21, 2022 @03:13AM (#32538038)
You don't need to have email on the device you are logging in from

Can take out phone and click link

Re:Why don’t we do email verification in reverse? by zimpenfish on Sunday August 21, 2022 @04:03AM (#32538250)
> Can take out phone and click link

That assumes you have that email account on your phone. Also that you have your phone with you, that your phone has signal / wifi, there's no delays, no greylisting, no spam filtering that might catch the email, ...

There's just too many simple ways it can break down for it to be a good system.

Re:Why don’t we do email verification in reverse? by koide on Sunday August 21, 2022 @08:30AM (#32539500)
Okay, but what if you don't know your password and your password manager is offline or you don't have access to it on your phone or the phone ran out of battery or... I assure you we can find a similar amount of cases where passwords would fail. It's mostly novelty phobia.

We're used to one way of working and have our setups for that. We don't want something different but not because it's worse. It's just different.

And even more, when you have a problem with your password, what do you have to do, yes, email for the most part.

Re:Why don’t we do email verification in reverse? by Macha on Sunday August 21, 2022 @09:17AM (#32539852)
On at least half of those services, that ends up with me being logged in on my phone which is decidedly not what I want.

Plus I don't know who's using that to help adtech build their cross device mappings

Re:Why don’t we do email verification in reverse? by bombcar on Sunday August 21, 2022 @09:05AM (#32539761)
Some of the ones that doesn’t work - it logs you in on your phone but not the computer you were trying to login on
Re:Why don’t we do email verification in reverse? by innocenat on Sunday August 21, 2022 @10:52AM (#32540763)
Email I wanted to use as a login is a totally be a different email than what I wanted to forward to.