 Falcon4  teh Fighting Falcon
|
Okay, so here are some possible solutions, and their problems:
Solution 1:
Just allow lost password recovery based on username (as well as email). It'd act the same as using the email address.
Problem:
How does a user know what email address the confirmation is sent to?
Solution 2:
Allow lost password recovery based on username (as well as email), and show the user the email address the confirmation was sent to.
Problem:
Full email addresses would then be available to the general public just by punching a username into the tool.
Solution 3:
Allow lost password recovery, etc., like #2, but only show the email domain (i.e. @yahoo.com), not the full address.
Problem:
How will the user know what account to check?
Solution 4:
???
Any ideas? |