moderated Re: Changing email address security issue #misc


Instead of continuing to support a major security breach, could simply streamline and clarify the process for users who want to change their email addresses. It is not rocket science, after all, or shouldn't be, even for unsophisticated users.

This is a very good point:  If we are going to spend the effort to fix the mod email-addy-change process (as best as possible), to make it secure (as much as possible), by involving the member in the process, might as well just rip the feature out and redirect that effort to making the user email-addy-change process the same best+secure as possible, plus as easy as possible.

It does seem like a win-win.


Join to automatically receive all group messages.