Identity/Notes/2011-07-14

From MozillaWiki
Jump to: navigation, search

Password Recovery Options

  1. Recovery email + no reverify
  2. No recovery + all grey + reverify
  3. No recovery + reverify
  4. No recovery + no reverify + warning spam

We like the last one (4)!

User Data - Where does it live?

Loose coupling between BrowserID and User Data services: BrowserID is auth *only*, User Data is an RP that uses VEP. It can correlate emails by asking multiple times, that's up to the user.