Newsletter cannot be subscribed to without providing an alternate email #849

New Issue

Closed

opened 2024-03-06 23:09:16 +01:00 by hrmo · 4 comments

hrmo commented

2024-03-06 23:09:16 +01:00

This pertains to the "Update Profile" page on user.disroot.org. It seems making any changes on this page requires the addition of an alternate email (see attached screenshot). It's unclear whether this alternate email is stored in an encrypted form or not. As a general principle, I strive to minimize the amount of my personal information that is stored anywhere. Which, of course is why I'm here in the first place 😸 And also why I've chosen to setup the security questions in case there are any problems with my password.

Is it feasible to not require folks to provide an alternate email in order to, say, subscribe to the monthly newsletter?

muppeth commented

2024-03-07 11:10:30 +01:00

Owner

Thanks for reporting I will check it out. In principle this filed should not be required indeed. Temporary workaround is to provide your @disroot.org email.

👍 1

muppeth added this to the 24.03 - March milestone 2024-03-07 11:10:35 +01:00

muppeth added the

bug

label 2024-03-07 11:10:42 +01:00

hrmo commented

2024-03-08 03:43:08 +01:00

Author

Might also be nice to include a note on that page about the privacy ramifications of attaching a secondary email to the account? Could be something brief, like something to the effect of:

"This email will be stored in an encrypted form separately from the rest of your account data, but accessible to all Disroot administrators."

"This email will be stored in an encrypted medium, together with the rest of your account information. Lawful requests for this information will be complied with."

Might also be nice to include a note on that page about the privacy ramifications of attaching a secondary email to the account? Could be something brief, like something to the effect of: "This email will be stored in an encrypted form separately from the rest of your account data, but accessible to all Disroot administrators." Or "This email will be stored in an encrypted medium, together with the rest of your account information. Lawful requests for this information will be complied with."

👍 1

muppeth commented

2024-04-08 10:28:15 +02:00

Owner

Did a test to see why I set it the way I did, but looks like the attribute cannot be empty as it will cause error. So I added a line that the field cannot be empty and if unused should be set to disroot email address. It will do for now, specially that we start working on new authentication syste,

muppeth closed this issue

2024-04-08 10:28:15 +02:00

hrmo commented

2024-04-08 17:53:07 +02:00

Author

I just confirmed the appearance and functionality of the form by finally subscribing to the newsletter. Thanks muppeth!