4 ms·
An impassioned article, but the ultimate takeaway is that websites that accept ownership of an email address as some sort of identity proof do not operate optim
by sk5t 11y ago
An impassioned article, but the ultimate takeaway is that websites that accept ownership of an email address as some sort of identity proof do not operate optimally when you lose control of any associated email addresses. So, stick to one or two email addresses not generally subject to organizational appropriation, and accept that we don't have the tools for stronger authentication for this class of website at similar cost.
- andreineculau 11y agoToo impassioned for my own taste but that's how it was in the spur of the moment. I still cannot understand what through their mind making it so easy I have never reset a password, only changed it on one of these services where I have 2FA enabled and I expected them to make use of 2FA! Like it is today, it is harder for me to change my own password (enter email and password, enter 2FA code, go to settings, enter password --- again only password ---, change password) than to reset it (enter email, click link in my inbox, change password)