rotemliss wrote:

This would be a bit difficult, as what currently shown is only the merging reason info, stored in the database. Nevertheless, you can't choose not to merge accounts that can be merged automatically.

I would support automatically merging only accounts that have their e-mail address confirmed, to avoid possible merges with malicious users. CentralAuth should ensure all the contributions from the merged accounts are done by the same person, and merging users with unconfirmed e-mail address breaks this, and may make the sysops think he is the same user, which may be a vandal, or even blocked indefinitely (and now his new account will be useless). (You may say merging empty users breaks this too, but fortunately, empty users made no contributions, and may be blocked only for name, which is shared anyway.)

rotemliss wrote:

E-mail is mentioned and used for migration only if confirmed as of r32091.