After some investigation today into a prod DB dump, I think now that we don't need to worry so much about an email address that corresponds to multiple profiles. I'd say that, when signing in with BrowserID, we just grab the most recently used profile for the verified email address. * 17863 of 154854 profiles have a blank email address. (Never verified?) * 2563 of 103400 distinct email addresses are used in multiple profiles. * Most of those email addresses point to profiles for which there is just one single login. An arbitrary peek reveals profile details that appear suspiciously spammy. * A smaller proportion looks like people who misspelled their user name the first time, and re-registered. * An even smaller proportion comes from automated XSS and security testing tools.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
Component: Website → Landing pages
Product: Mozilla Developer Network → Mozilla Developer Network
You need to log in before you can comment on or make changes to this bug.