Re:Magic/tragic email links: don't make them the only option
by adastra22 on Wednesday January 08, 2025 @12:40AM
(#42631308)
Why not just have a username & password. Why make everything so complicated? We just successfully got password managers deployed to most users, only to drop passwords entirely for a subpar system?
Re:Magic/tragic email links: don't make them the only option
by cuu508 on Wednesday January 08, 2025 @01:03AM
(#42631467)
> We just successfully got password managers deployed to most users
Source?
Re:Magic/tragic email links: don't make them the only option
by adastra22 on Wednesday January 08, 2025 @04:24AM
(#42632458)
Every desktop and mobile OS has a built-in password manager perfectly adequate for this use case, with encrypted sync and backup capabilities.
Re:Magic/tragic email links: don't make them the only option
by justinator on Wednesday January 08, 2025 @03:48PM
(#42638284)
One example is an unsubscribe link. Legally, it would be no bueno to have it behind any sort of login.
Another is just counting if a link from an email was clicked. I want friction to be as little as possible. That's done by having some sort of redirect, but you have to use a JavaScript initiated post to weed add false positives. That's already ridiculous, but because of automated link prefetchers, you still need to disable that and show a f'n button.
And then I have to answer to clients that want to know why their clickthrough stats are down precipitously and I don't honestly have the wherewithall to explain the inner workers of every filter that snoops their email before they read it.
I've had to implement a system where if the link was minted x minutes ago, the JavaScript on the landing page is disabled.
It's just another arms race. It shouldn't be this hard, but in email it seems everything is additionally harder to do.