Regardless of whether this will be accepted, users need to be retrained. Any site that offers a password reset via email already effectively lets you login via

Regardless of whether this will be accepted, users need to be retrained. Any site that offers a password reset via email already effectively lets you login via email. Users should be aware of this so they can be more careful with their email (picking a decent password, ensuring they logout on public computers, etc). IMHO everyone should be using two-factor authentication for their email.