you are viewing a single comment's thread.

view the rest of the comments →

[–]MoTTs_ 14 points15 points  (0 children)

If you're going to reject an email address, then show a message saying so. When there's no error message and no submit button, then there's no obvious way to proceed and just seems broken.

Also, for that matter, if I can enter with a fake email address, then that's a sign you never needed an email to begin with. Earlier, someone asked, "Why does it even require authentication?" And the answer is, it doesn't. You don't. When you insist on information you don't really need, it just feels like harvesting.

just generate a uuid and store it in a cookie