Forum Moderators: phranque

Message Too Old, No Replies

User Email Verification: Why?

Are email callbacks still necessary in Web 2.0

         

flyerguy

10:59 am on Jun 22, 2006 (gmt 0)

10+ Year Member



We do not use confirmation emails because, simply put, we view email accounts as being meaningless in terms of security verification. It -is- the standard on many ecommerce sites / message forums / portals but not many people ask why any more.

It seems to be one of those things that's been done for so long, I've forgotten how to make a good argument -for- it, and only see it as more of an annoyance than something of practical value.

With so many free email providers, what is the benefit that either my business gains or a user of the site gains by including an extra step to 'confirm' an email account? In fact, the only thing that's confirmed is that, "yes, you have an email account"- not very helpful in the overall scheme of securing our website or providing a better user experience.

While it can catch if you mis-type your email address on signup and provide a headaches, more and more people are using automatic form-filling add-ins for their internet browser, so their email, name, etc. are filled in automatically on signup forms in sites they visit.

I believe time is short for most people and although it is a familiar task, answering a confirmation email is just one more step that is unnecessary and adds to user frustration. In terms of security, I have numerous techniques in place, and do very well with the current strategy.

With new AJAX forms, simple typos can be caught quickly and thus erroneous email inputs reduced. I'd personally rather have two email inputs (like the standard double password sequence), that must match. A form-filler program would make this even simpler..

Opinions?

trillianjedi

11:18 am on Jun 22, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I do think there's still value in e-mail verification in preventing automatic processes. A "click here to activate" link in an email is still another measure against an attack by automated process. It's not great, but it does have some value.

It's also not just about validating that a user has entered their email address correctly, it also validates that mail can and does actually reach them at that address.

we view email accounts as being meaningless in terms of security verification

I agree with that. I don't think it's actually still in use for that reason though.

TJ

adamas

12:44 pm on Jun 22, 2006 (gmt 0)

10+ Year Member



It protects against somebody maliciously signing up with somebody else's email address to get them bombarded with notifications, newsletters etc.