Live data from Hacker News

A better way of validating an email address

alentodorov.posterous.com

1–10 of 15 posts

Re: A better way of validating an email address

#3
I use mutt. I'm not the only one. There are also people who read their email in emacs. There are people who turn off image loading in HTML-capable mail readers.

All of these are the kind of people you want using your service or software: clueful and security conscious. When they recommend something, people listen. As customers, they're less likely to ask a FAQ and more likely to point out an actionable bug or deficiency.

The only problem I have with 'click-to-confirm' email messages is that some services deliver them slowly. If you can fire off an email when I click Register, I can be reading it and cutting-and-pasting the URL or ID code five seconds later. A message that doesn't arrive for ten or fifteen minutes means I have to context-switch away and then back.

Re: A better way of validating an email address

#4
post #2

Comment in the post says it all.

Yes ("Disadvantage of this is that anyone who receives that mail will get registred without their consent if their mail client automatically shows images.").

If people do insist on using this method, they should at least add a prominent link to cancel the account in the e-mail.

But what if some random e-mail client prefetches the image and the e-mail end up never being read or whatever? This is not robust.

Re: A better way of validating an email address

#5
I don't really see the point because you still have to switch to your email to open the message. I think a better solution is to let your users start using your service immediately, but require they click the email validation link within 24 hours. Or offer reduced (less abusable) functionality until they verify. Of course, this won't work for all services, especially if spammers can start abusing their account immediately.

Re: A better way of validating an email address

#6
post #3

I use mutt. I'm not the only one. There are also people who read their email in emacs. There are people who turn off image loading in HTML-capable mail readers. All of these are the kind of people you want using your service or software: clueful and security conscious. When they recommend something, people listen. As customers, they're less likely to ask a FAQ and more likely to point out an actionable bug or deficie…

There is a very clearly featured "Alternatively click here" link.

Re: A better way of validating an email address

#7
post #4
post #2

Comment in the post says it all.

Yes ("Disadvantage of this is that anyone who receives that mail will get registred without their consent if their mail client automatically shows images."). If people do insist on using this method, they should at least add a prominent link to cancel the account in the e-mail. But what if some random e-mail client prefetches the image and the e-mail end up never being read or whatever? This is not robust.

> But what if some random e-mail client prefetches the image and the e-mail end up never being read or whatever? This is not robust.

The whole point of not loading images is the privacy concern, so if your email client (which is any email client with any kind of traction in the past decade) offers (and defaults to) not loading images, it will indeed not hit the URL.

Re: A better way of validating an email address

#8
post #5

I don't really see the point because you still have to switch to your email to open the message. I think a better solution is to let your users start using your service immediately, but require they click the email validation link within 24 hours. Or offer reduced (less abusable) functionality until they verify. Of course, this won't work for all services, especially if spammers can start abusing their account immedi…

Most services allow you to use your account immediately but only for non content creation actions in order to prevent abuse.

Re: A better way of validating an email address

#9
post #5

I don't really see the point because you still have to switch to your email to open the message. I think a better solution is to let your users start using your service immediately, but require they click the email validation link within 24 hours. Or offer reduced (less abusable) functionality until they verify. Of course, this won't work for all services, especially if spammers can start abusing their account immedi…

Spammers can provision an unlimited number of email addresses, so you won't stop a spammer by requiring him to validate an e-mail address.

I can think of three reasons you want to validate an e-mail address like this:

- Confirming that you've typed your e-mail address correctly and that it is reachable

- Preventing you from impersonating someone else

- Opt-in for sending you e-mails. Not really to prevent you from spamming/harassing/annoying someone else (there are many ways other ways to do this), but to prevent the service from having e-mails marked as spam.

I'm sure the last one is the strongest, as being blacklisted from one of the big e-mail providers would really hurt most online services.

Post reply on HN