I am building an authentication system for my website and am trying to figure out whether I should force the user to verify their email address before they can be fully authenticated so the user can perform actions like posting, commenting, purchasing etc.
Most people online seem to suggest that email verification should be a mandatory step in the registration process, because if the user were to ever miss type their email address then they would be at risk of losing all their data when they logout or if another user were to login with the miss-typed email address.
But in practice, most websites like indie hackers, reddit, airbnb, twitch, never enforce email verification during the registration (or even purchasing) process. So how do companies like these handle situations where a user has miss-typed their email address? I'm pretty sure this has happened quite a few times on their platforms given their large user bases.
sources:
- https://ift.tt/3fwbreT
- https://ift.tt/3fBBTUy
- https://ift.tt/2YNWWNl
Comments URL: https://news.ycombinator.com/item?id=23120729
Points: 3
# Comments: 2
from Hacker News: Newest https://ift.tt/2SM1MH6
0 comments:
Post a Comment