Comment 1 for bug 598464

Revision history for this message
Curtis Hovey (sinzui) wrote :

This is about creating a user for authentication, I think the foundations team needs to give this consideration. PersonSet should not be creating an Account, and I understand the Lp-foundations teams want to remove the table. This mechanism appears to by bypassing the email confirmation steps to ensure the user is legitimate.

Given that we are attacked by spammers every day, and one has proven to be partiulary adept at exploiting SSO and Launchpad to create identities, I think this feature are described is bad.