Page MenuHomePhabricator

Email notification to old address when verified email address is changed or removed
Closed, ResolvedPublic

Description

If a verified email address is changed or removed, an email notification should be sent to the old address. The email is for informational purposes only, it should not contain any verification codes. The main purpose of this is a reasonable defense against account cracking.

Discussion on en.wp: [[Wikipedia:Village pump (proposals)/Account security#Notify of removal of verified email address]]


Version: unspecified
Severity: enhancement

Related Objects

StatusSubtypeAssignedTask
ResolvedGalorefitz
Resolvedkostajh
OpenNone
ResolvedNone
OpenNone
ResolvedShivanshbindal9
ResolvedShivanshbindal9
OpenNone
ResolvedShivanshbindal9
ResolvedShivanshbindal9
ResolvedShivanshbindal9
OpenNone
OpenNone
DuplicateNone
ResolvedJMinor
OpenNone
StalledNone

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 11:27 PM
bzimport added a project: MediaWiki-Email.
bzimport set Reference to bz29856.
bzimport added a subscriber: Unknown Object (MLST).
Devirk set Security to None.
Devirk added a subscriber: Devirk.

Change 276563 had a related patch set uploaded (by Galorefitz):
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563

Change 276563 merged by jenkins-bot:
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563