Change email address of account

Go down

Change email address of account

Post by adrian on Tue Oct 11, 2011 3:50 pm

This is not really a bug, but i think it`s not right.

When you want to change mail address confirmation code is sent to new email address?! Shouldn`t it be sent to old mail, as a confirmation that the real owner of the account wants email address change?

I`m thinking at this scenario: someone gets my password, how/what method doesn`t matter. How am I protected to gain back access to my account if this happens, and my account password and email gets changed?

adrian
Aderan Soldier
Aderan Soldier

Number of posts : 33
Registration date : 2009-08-31

View user profile

Back to top Go down

Re: Change email address of account

Post by Steveanaya on Wed Oct 12, 2011 4:25 am

What if you forgot the password to your old email address and that's why you're changing it
avatar
Steveanaya
Aderan Assassin
Aderan Assassin

ID : 1624
Alliance : Fedaykin
Age : 22
Number of posts : 695
Location : Narnia
Registration date : 2010-07-18

View user profile

Back to top Go down

Re: Change email address of account

Post by adrian on Wed Oct 12, 2011 11:50 am

very unlikely to forget mail password; and i have backup email setup + security questions.

In aderan 0 options without email.

adrian
Aderan Soldier
Aderan Soldier

Number of posts : 33
Registration date : 2009-08-31

View user profile

Back to top Go down

Re: Change email address of account

Post by Keinutnai on Wed Oct 12, 2011 12:45 pm

adrian wrote:This is not really a bug, but i think it`s not right.

When you want to change mail address confirmation code is sent to new email address?! Shouldn`t it be sent to old mail, as a confirmation that the real owner of the account wants email address change?

I`m thinking at this scenario: someone gets my password, how/what method doesn`t matter. How am I protected to gain back access to my account if this happens, and my account password and email gets changed?

What you say makes sense, but there is also the opposite view. What if someone sets a new email address, and then has to confirm on the old email address. confirms on the old email address and realises that he cannot log in into the new email address. Then he can never change his email address again.

Or another situation. Someone lost his email access and wants to change to an email he is using now. Then he cannot do it anymore, because he cant log in to his old account.

The only problem I see is that if you use a public computer, and dont log out, and someone sees your account, he can steal the account from you.
That's why it might be a good idea to ask also for the password when you want to change your email address.
avatar
Keinutnai
Aderan Assassin
Aderan Assassin

Alliance : World Republic
Number of posts : 663
Registration date : 2011-04-08

View user profile

Back to top Go down

Re: Change email address of account

Post by Admin on Wed Oct 12, 2011 5:44 pm

adrian wrote:This is not really a bug, but i think it`s not right.

When you want to change mail address confirmation code is sent to new email address?! Shouldn`t it be sent to old mail, as a confirmation that the real owner of the account wants email address change?

I`m thinking at this scenario: someone gets my password, how/what method doesn`t matter. How am I protected to gain back access to my account if this happens, and my account password and email gets changed?
keep in mind, it's not just your password someone has to find out, also your email address you're using to login.
chances are if someone finds out all that, they are also able to get into your email account itself

the password to change email is obviously not very useful since even doing as little as closing the browser on a public computer is completely enough to get you logged out.

_________________
Disclaimer:
1) You are always welcome to correct my assumptions and understanding of a situation but please do so in a logical and sound manner.
2) If I ask stupid questions it's only because sometimes people aren't smart enough to ask these themselves.
3) Being condescending to some people helps me keep my sanity when I am forced to interact with them.

I hate PR, will never engage in it and will rain destruction on all who refuse to use their brains to think before they speak.
avatar
Admin
Admin

Number of posts : 4363
Registration date : 2008-08-18

View user profile http://www.aderanwars.com

Back to top Go down

Re: Change email address of account

Post by Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum