Re: creating new Hub account from the accounts dialog

Hi Heikki

> Is there some reason why we'd need to validate the email when done  
> from
> the desktop client?



How could the server reliably distinguish between signups from the  
desktop client and signups from any other client?

If you assume the activation email is a necessary measure to prevent  
automated bot-signups (an assumption that we can definitely discuss!)  
I would argue that most trivial mechanisms you could create to provide  
exceptions to this would render the entire process useless. Certainly,  
verifying that a client definitely belongs to a certain class of  
clients is a non-trivial problem that we have not (to my knowledge)  
done any work on.

This is not to say we couldn't come up with a way to handle this - we  
control the client and server after all - but I don't believe it would  
be an easy fix. I don't think requiring users to check their email  
before proceeding with the sharing workflow is particularly onerous,  
and what we're proposing is definitely a step up from the current  
state of things.

If there is an easy solution to this problem that I am ignorant of,  
please don't hesitate to point me in the right direction!

-Travis


_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design