[Design] creating new Hub account from the accounts dialog
travis at osafoundation.org
Thu Dec 13 12:02:22 PST 2007
> Is there some reason why we'd need to validate the email when done
> the desktop client?
How could the server reliably distinguish between signups from the
desktop client and signups from any other client?
If you assume the activation email is a necessary measure to prevent
automated bot-signups (an assumption that we can definitely discuss!)
I would argue that most trivial mechanisms you could create to provide
exceptions to this would render the entire process useless. Certainly,
verifying that a client definitely belongs to a certain class of
clients is a non-trivial problem that we have not (to my knowledge)
done any work on.
This is not to say we couldn't come up with a way to handle this - we
control the client and server after all - but I don't believe it would
be an easy fix. I don't think requiring users to check their email
before proceeding with the sharing workflow is particularly onerous,
and what we're proposing is definitely a step up from the current
state of things.
If there is an easy solution to this problem that I am ignorant of,
please don't hesitate to point me in the right direction!
More information about the Design