Summary

See phab:T129747:

The same email address is used for wikimail and password recovery.

For password recovery an address with a secure mail provider is a good choice. For wikimail on the other hand a throw-away-mail-address, that can be easily replaced, if it becomes known to a stalker or the public, makes more sense. This is especially true for accounts with additional rights and prolific authors. These groups cannot work without wikimail and are unlikely to abstain from the possibilty to recover a lost password.

I propose the following: Add the option to specify a second email address in the preferences for all users.

Add the following global preferences (email and password are already global):

• checkboxes to select what email address to use with wikimail or none at all
• checkboxes to select what email address to use for password recovery or none at all
  • if both boxes are checked, different temporary passwords are sent to both addresses and both are needed to login
• checkboxes to select what email address to use for echo and other notifications
• in a more ambitious additional approach the local echo preferences could allow the configuration of every notification type to be sent onwiki, to first address, to second address
• checkboxes to send a TAN to either of the adresses on login (achieving a cheap way of 2FA, at least until true 2FA is implemented)

In a given time frame only one email address can be changed. A confirm message is sent to the new address and additionally a "cancel the change" message is sent to the other unchanged address.

The option of two addresses would allow the use of a throw-away-email-address for wikimail. So if this address becomes known to a stalker, you can simply change this address, while keeping your secret secure email address for all other uses.

Nothing changes for any user who does not specify an email address or stays with one address.

• 
  preferences page
• 
  notifications preferences
• 
  change a mail address
• 
  change a mail address

Licensing

𝔊𝔯𝔞𝔡𝔷𝔢𝔦𝔠𝔥𝔢𝔫 (Gradzeichen), the copyright holder of this work, hereby publishes it under the following license:

This file is licensed under the Creative Commons Attribution-Share Alike 4.0 International license.

Attribution:
𝔊𝔯𝔞𝔡𝔷𝔢𝔦𝔠𝔥𝔢𝔫 – CC-BY-SA-4.0
or
Gradzeichen – CC-BY-SA-4.0

You are free:

• to share – to copy, distribute and transmit the work
• to remix – to adapt the work

Under the following conditions:

• attribution – You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
• share alike – If you remix, transform, or build upon the material, you must distribute your contributions under the same or compatible license as the original.

https://creativecommons.org/licenses/by-sa/4.0CC BY-SA 4.0 Creative Commons Attribution-Share Alike 4.0 truetrue

Media uploaded by °, Gradzeichen, G, 𝔊𝔯𝔞𝔡𝔷𝔢𝔦𝔠𝔥𝔢𝔫, 𝔊