Comment by gus_massa
1 day ago
The problem is how to start a conversation.
We had a similar problem in the university. At the beginning of the semester, the students have to register for a Moodle server with additional material. So when they create an account, we have to send a few thousands of confirmation emails in a short period out of the blue, that makes Gmail/Yahoo/Outlook/Whatever unhappy.
The solution was to ask the students to send an email to the server half an hour before registering. It's not ideal, but it adds us to a secret list of known contacts of the student, so (most) emails are delivered.
> we have to send a few thousands of confirmation emails
What are you confirming, and why do you have to send it as E-mail? If it's sign-ups, just "confirm" using the same system that the user used to sign-up. Presumably HTTP.
on most services you sign up by using an email address (or a phone number) as an identifier. these need to be verified to make sure it's actually yours and not someone else's, or a typo.
They don't need to be verified through E-mail or through the phone, though. A simple landing page after you sign up that says: "We signed up [E-mail] for this service using [phone number]. If this is incorrect, [click here] to make corrections" would work, too.
Frankly, I'm getting tired of having to constantly "verify" this and "confirm" that every time I sign up for or log into an online service. It's especially annoying after I've already signed up. Every bank that I haven't logged into for the last 5 milliseconds hits me with a "confirm your E-mail yet again" flow. I'm going to just start using "password" for my password if these guys keep insisting on round-tripping through my E-mail every time I need to do anything.
3 replies →
If you used a username, you wouldn't have this problem. As it stands, signing up someone else's address for a lot of sites to spam them with confirmations is already an attack vector that's used in the wild. And that's legitimate spam and should be reported as spam and sites that do this are spam amplifiers.
Why are you making the students use their personal e-mail rather than the school e-mail?
it's probably the other way around. students use their private email, and they somehow can't make them use a school email.
Then make the system use the school e-mail automatically without asking them? That’s how it works at my faculty.
1 reply →