4 ms·

Why do these systems bother with passwords at all? Given you can always reset with an email, just have login always be the reset flow.

viraptor 6y ago
https://en.wikipedia.org/wiki/Greylisting_(email) https://en.wikipedia.org/wiki/Greylisting_(email) Are you ok to sometimes wait up to an hour to log in?
- kiwijamo 6y ago
  Modern email systems don't seem to use Greylisting. I used it many years go but it seems to have gone out of fashion nowdays. I now use Fastmail which doesn't seem to employ Greylisting (or at least I've never seen it become an issue). I suppose spammers have now gotten wise to it and have now devised ways to get round it so it's no longer effective and thus no longer widely used.
  - viraptor 6y ago
    I'm running my email on a private, small volume domain. Greylisting is still super popular and common. You won't experience greylisting on popular domains... because they're popular.
    - fullstop 6y ago
      I set up greylisting on our MTA and eventually had to remove it. While I was okay with waiting a while to receive a message other people were incredibly frustrated with it. It was particularly troublesome when a service would send them a code in email, it didn't arrive, and then they would ask for another one. The first code would finally arrive, but it was marked as invalid because the second code that they had asked for was now the valid one. It just wasn't worth the trouble and headaches.
DocTomoe 6y ago
These days, I mostly read my email on a device. I still log into stuff on my computer. Having to bring up another website, logging in (something I don't do on the tablet / the mobile phone), waiting for an email and then maybe be allowed in is a productivity killer for me. Do not reinvent the wheel. Passwords work. Just store them somewhat sanely with an acceptable degree of security.
scoopertrooper 6y ago
Some websites do support this sort of flow as an alternative authentication method.
toomanybeersies 6y ago
So every time I want to log in I need to open an email and follow the link, instead of being able to use my password manager to log in? Sounds like progress to me.
- ec109685 6y ago
  So you don’t use two factor?

viraptor 6y ago

https://en.wikipedia.org/wiki/Greylisting_(email) https://en.wikipedia.org/wiki/Greylisting_(email) Are you ok to sometimes wait up to an hour to log in?

kiwijamo 6y ago
Modern email systems don't seem to use Greylisting. I used it many years go but it seems to have gone out of fashion nowdays. I now use Fastmail which doesn't seem to employ Greylisting (or at least I've never seen it become an issue). I suppose spammers have now gotten wise to it and have now devised ways to get round it so it's no longer effective and thus no longer widely used.
- viraptor 6y ago
  I'm running my email on a private, small volume domain. Greylisting is still super popular and common. You won't experience greylisting on popular domains... because they're popular.
  - fullstop 6y ago
    I set up greylisting on our MTA and eventually had to remove it. While I was okay with waiting a while to receive a message other people were incredibly frustrated with it. It was particularly troublesome when a service would send them a code in email, it didn't arrive, and then they would ask for another one. The first code would finally arrive, but it was marked as invalid because the second code that they had asked for was now the valid one. It just wasn't worth the trouble and headaches.

DocTomoe 6y ago

These days, I mostly read my email on a device. I still log into stuff on my computer. Having to bring up another website, logging in (something I don't do on the tablet / the mobile phone), waiting for an email and then maybe be allowed in is a productivity killer for me. Do not reinvent the wheel. Passwords work. Just store them somewhat sanely with an acceptable degree of security.

scoopertrooper 6y ago

Some websites do support this sort of flow as an alternative authentication method.

toomanybeersies 6y ago

So every time I want to log in I need to open an email and follow the link, instead of being able to use my password manager to log in? Sounds like progress to me.

ec109685 6y ago
So you don’t use two factor?