3 ms·
I like idea of Persona, but the idea of requiring emails prevents me from ever implementing it. There are plenty of places where I need an identity system, but
by Afforess 13y ago
I like idea of Persona, but the idea of requiring emails prevents me from ever implementing it. There are plenty of places where I need an identity system, but don't want to force users to fork over their email address.
- jlongster 13y agoYou almost always want their email address so that you can email them a password reset link in case they forget their password, which is even more important on smaller obscure sites where that's bound to happen.
- Afforess 13y agoIf users don't want to provide an email (and then can't reset their password), that should be their prerogative.
- kibwen 13y agoAs a user who doesn't want to provide my personal email to random services, I have a throwaway email on a different provider with a gibberish username. Given that signing up for 99% of services already requires an email account (or a Facebook/Twitter login, which themselves require a verified email address), Persona is no less onerous.
- wmf 13y agoRealistically, in the modern commercial Web, a user who doesn't want to provide an email probably has negative lifetime value.
- freeman478 13y agoYes but with Personna you don't need to send them a password reset link because they have no password in your system :)
- Torgo 13y agoFrom their docs: "The protocol does not require that [identity provider]-backed identities are SMTP-routable, but it does require that identities follow the user@domain format." The protocol still requires an identity provider to attest to your identity, but the actual identitifier doesn't appear to have to be a real email address. It seems like you could use anything in email address format.