browserid: define UX for all scenarios

VERIFIED FIXED in 1.8

Status

VERIFIED FIXED
7 years ago
6 years ago

People

(Reporter: groovecoder, Assigned: craigcook)

Tracking

unspecified
x86
Mac OS X

Details

(Whiteboard: u=user c=browserid p=3)

Comment hidden (empty)
(Reporter)

Updated

7 years ago
Duplicate of this bug: 675708
(Reporter)

Updated

7 years ago
Blocks: 706518
(Assignee)

Updated

7 years ago
Assignee: nobody → craigcook.bugz
After some investigation today into a prod DB dump, I think now that we don't need to worry so much about an email address that corresponds to multiple profiles. 

I'd say that, when signing in with BrowserID, we just grab the most recently used profile for the verified email address.

* 17863 of 154854 profiles have a blank email address. (Never verified?)

* 2563 of 103400 distinct email addresses are used in multiple profiles.

* Most of those email addresses point to profiles for which there is just one single login. An arbitrary peek reveals profile details that appear suspiciously spammy.

* A smaller proportion looks like people who misspelled their user name the first time, and re-registered.

* An even smaller proportion comes from automated XSS and security testing tools.
(Reporter)

Updated

7 years ago
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED
Version: MDN → unspecified
Component: Website → Landing pages
Product: Mozilla Developer Network → Mozilla Developer Network
You need to log in before you can comment on or make changes to this bug.