If an email account can be used for password reset, a compromised email account can be used to log in. Since much of the internet already works this way, the p

If an email account can be used for password reset, a compromised email account can be used to log in. Since much of the internet already works this way, the proposed system has a neutral effect on security, while making things easier for users. In effect, any site that offers a password reset via email is already using your email as your identity.