-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Gregory Maxwell wrote:
On 8/14/07, Steve Sanbeg ssanbeg@ask.com wrote:
It seems fine to me to merge an account with an unconfirmed email into a matching email. If I really want that as my home wiki, I could change it later; if it's an imposter, then I should get control of the account. Just make sure that when picking a home wiki, the confirmed email always wins.
That just shifts the failure modes about. Say you, like many others, don't have a confirmed email on your primary project. You have 10 gillion edits... whatever, just no confirmed email.
An Some evil troll goes and creates an account with your name on klingon wikisource and old english wikibooks, confirms his own email, and makes a couple of edits.. Then merges his accounts.
Under the proposed scheme, he can't merge his accounts, since he doesn't own the primary account -- having a confirmed e-mail address didn't win him anything there. He still would have had to gain a privileged account first in order to win out over your unprivileged much-used account.
- -- brion vibber (brion @ wikimedia.org)