Identity/Notes/2011-07-14
From MozillaWiki
Password Recovery Options
- Recovery email + no reverify
- No recovery + all grey + reverify
- No recovery + reverify
- No recovery + no reverify + warning spam
We like the last one (4)!
User Data - Where does it live?
Loose coupling between BrowserID and User Data services: BrowserID is auth *only*, User Data is an RP that uses VEP. It can correlate emails by asking multiple times, that's up to the user.