A better way of validating an email address
alentodorov.posterous.com
A better way of validating an email address
1–10 of 15 posts
Re: A better way of validating an email address
#2Re: A better way of validating an email address
#3All of these are the kind of people you want using your service or software: clueful and security conscious. When they recommend something, people listen. As customers, they're less likely to ask a FAQ and more likely to point out an actionable bug or deficiency.
The only problem I have with 'click-to-confirm' email messages is that some services deliver them slowly. If you can fire off an email when I click Register, I can be reading it and cutting-and-pasting the URL or ID code five seconds later. A message that doesn't arrive for ten or fifteen minutes means I have to context-switch away and then back.
Re: A better way of validating an email address
#4Comment in the post says it all.
If people do insist on using this method, they should at least add a prominent link to cancel the account in the e-mail.
But what if some random e-mail client prefetches the image and the e-mail end up never being read or whatever? This is not robust.
Re: A better way of validating an email address
#5Re: A better way of validating an email address
#6I use mutt. I'm not the only one. There are also people who read their email in emacs. There are people who turn off image loading in HTML-capable mail readers. All of these are the kind of people you want using your service or software: clueful and security conscious. When they recommend something, people listen. As customers, they're less likely to ask a FAQ and more likely to point out an actionable bug or deficie…
Re: A better way of validating an email address
#7Comment in the post says it all.
Yes ("Disadvantage of this is that anyone who receives that mail will get registred without their consent if their mail client automatically shows images."). If people do insist on using this method, they should at least add a prominent link to cancel the account in the e-mail. But what if some random e-mail client prefetches the image and the e-mail end up never being read or whatever? This is not robust.
The whole point of not loading images is the privacy concern, so if your email client (which is any email client with any kind of traction in the past decade) offers (and defaults to) not loading images, it will indeed not hit the URL.
Re: A better way of validating an email address
#8I don't really see the point because you still have to switch to your email to open the message. I think a better solution is to let your users start using your service immediately, but require they click the email validation link within 24 hours. Or offer reduced (less abusable) functionality until they verify. Of course, this won't work for all services, especially if spammers can start abusing their account immedi…
Re: A better way of validating an email address
#9I don't really see the point because you still have to switch to your email to open the message. I think a better solution is to let your users start using your service immediately, but require they click the email validation link within 24 hours. Or offer reduced (less abusable) functionality until they verify. Of course, this won't work for all services, especially if spammers can start abusing their account immedi…
I can think of three reasons you want to validate an e-mail address like this:
- Confirming that you've typed your e-mail address correctly and that it is reachable
- Preventing you from impersonating someone else
- Opt-in for sending you e-mails. Not really to prevent you from spamming/harassing/annoying someone else (there are many ways other ways to do this), but to prevent the service from having e-mails marked as spam.
I'm sure the last one is the strongest, as being blacklisted from one of the big e-mail providers would really hurt most online services.
Re: A better way of validating an email address
#10Technically nothing has been validated. You've proved that the email address exists. But it's deliberate use hasn't been validated. And that's the whole point of validation.