Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think it depends on what the sits is for and how cookies are handled.

If your login mechanism sets a cookie after they verify the link then they can continue to be logged in for 3 months or however long you want. This is similar to what you would do with a password.

Also the site type and your audience makes a big difference. I wouldn't do it on a site where folks aren't technical.

But for example what about an ecommerce site where customers need to register an account + put in credit card details to place an order and then they get access to digital goods?

In the above case the lack of password is a benefit because it simplifies the payment form. Now they only need to put in an email address + card details.

And for getting access to what they purchased a slight delay isn't the end of the world. You could even give them access to it immediately in some type of unverified way (limited features until they verify). Also it's a slight deterrent for account sharing.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: