706616 - browserid: define UX for all scenarios

Status: VERIFIED FIXED

(developer.mozilla.org Graveyard :: Wiki pages, defect)

Comment 1

[Luke Crouch [:groovecoder]]

https://wiki.mozilla.org/Identity/BrowserID/TransitioningSites

Comment 3

[Les Orchard [:lorchard]]

I made a thing from my brain:

https://wiki.mozilla.org/Identity/BrowserID/TransitioningSites#BrowserID_flow_with_legacy_migration
https://wiki.mozilla.org/File:Browserid-migration.png

Comment 4

[Les Orchard [:lorchard]]

After some investigation today into a prod DB dump, I think now that we don't need to worry so much about an email address that corresponds to multiple profiles. 

I'd say that, when signing in with BrowserID, we just grab the most recently used profile for the verified email address.

* 17863 of 154854 profiles have a blank email address. (Never verified?)

* 2563 of 103400 distinct email addresses are used in multiple profiles.

* Most of those email addresses point to profiles for which there is just one single login. An arbitrary peek reveals profile details that appear suspiciously spammy.

* A smaller proportion looks like people who misspelled their user name the first time, and re-registered.

* An even smaller proportion comes from automated XSS and security testing tools.