4 ms·
Most of these are just overcomplicating validation. What really matters is account verification, i.e. sending an email to the specified email address in order t
by arkitaip 5y ago
Most of these are just overcomplicating validation. What really matters is account verification, i.e. sending an email to the specified email address in order to verify its authenticity before sending any kind of email (transactional, marketing) to the account.
At this point, not doing email verification should be considered a dark pattern because it causes so much trouble when people's email addresses are used without their permission.
- delecti 5y agoAnd "permission" isn't even the only issue. Months of Doordash account emails were lost to the ether because I made a typo (gmail.lcom) in my personal email, and it was basically impossible to change the email on an account (their SMS verification seems broken). It does explain why I never got order confirmations though, that had seemed odd.
- jerf 5y agoIt seems to be a common antipattern for somewhat smaller sites to make the email address the primary key on the account too, and then it's virtually impossible to ever change it after that. As you scale up it becomes impossible to ignore the fact that people change email addresses sometimes, but I've lost track of the number of smaller sites that assume it's a safe primary key.
- cperciva 5y agoraises hand I can confirm that this is a very stupid mistake to make. :-(