many people have said that they have lost their passwords. if we stored email addresses, we could have a "forgot password" thing.
it is also currently quite easy to make many many accounts and spam things.
we could also have email notifications. this first requires the implementation of notifications in general.
it probably would not be hard to make python log in to an email server and send emails. I have a server for such purposes.
things
- optional for apioforum instances
- perhaps require email verification for certain actions (but only for new accounts)
- rate limit the
fuck out of anything that sends emails - put an "unsubscribe" link at the end of every email. allow the recipient to use this link to be placed on a list of emails to not be emailed under any circumstances.
assigned to: no one
fossil branch: n/a