Page MenuHomePhabricator

e-mail confimation request should clarify security
Closed, DeclinedPublic

Description

MediaWiki:Confirmemail text

standardwise currently says: "This wiki requires that you validate your e-mail address
before using e-mail features. Activate the button below to send a confirmation
mail to your address. The mail will include a link containing a code; load the
link in your browser to confirm that your e-mail address is valid."

I suggest to append: "This only provides a limited amount of security. While this method would
be unacceptable if you bank account was concerned, it usually does reliably prevent sundry
internet users from fooling around with your e-mail address on the Wiki."


Version: unspecified
Severity: enhancement

Details

Reference
bz6851

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 9:18 PM
bzimport set Reference to bz6851.
bzimport added a subscriber: Unknown Object (MLST).

robchur wrote:

That would be additional advice that individual wikis would want to provide
their users with on a per-case basis. I don't think it's worth making the
message any longer.

My pledge is - as a reminder for those adapting the message - to include the hint in the generic msg, and delete for those who do not want it.

I would mind a terser wording.

Sorry: I would NOT mind a terser wording.

robchur wrote:

And *I* think it would make things even more cluttered and confusing for users.
Link to a help page that explains what email confirmation is and why we use it,
if you like.