couldn't they do something like the email address is yourusernameatyourdomain.comandanextrabityoutset@posterous.com which would be an id you could remember?
or both... assign a random GUID, and then allow the user to set it something they want if they choose. That's probably the simplest way, and of course the simpler the better for both development and security.
Comments
couldn't they do something like the email address is yourusernameatyourdomain.comandanextrabityoutset@posterous.com which would be an id you could remember?
or just a random noun@posterous.com? Or make it user-configurable?
or both... assign a random GUID, and then allow the user to set it something they want if they choose. That's probably the simplest way, and of course the simpler the better for both development and security.
Surely the easiest way would be to require you put your password somewhere in the body of the email.
eg:
I think that putting a password inside the post field (the email body) could lead to some issues. :)