Problem
I friend of mine recently wanted the create a steemit account but was denied with the following error message:
We don't know if this is because of a previous attempt to create an account or because someone with that similar phone number made a registration request. Either way: I can see several problems with phone numbers as registration requirement.
- Phone numbers are not a live long property. You can loose a phone number by getting a new contract with a different company. Especially if you move to another country. The number can also be assigned to a new user which then won't be able to register.
- People might make a typo when trying to register. Unlike a typo in an e-Mail the mistyped number will most likely still be a valid phone number. If the true owner of that number wants to register he or she will be denied service.
- Speaking of denied service: a malicious person could start and abandon a registration with someone else phone number in a deny of service attack. This is also valid for E-Mails.
Proposal
Adding a requirement for phone numbers, and in lesser degree EMail, without a recovery process seems to be a mayor design flaw top me. I suggest that the follwowing two features are added to the system:
- Registrations expiry: a registration attempt should expire after a short while freeing the number and Email for a new user.
- Number and eMail contest and recovery: A user should be able to contest the use of an eMail or phone number by another user as false.
Both options should be placed at an easy to find location in the GUI as they are mostly needed by new users which can't be expected to know there way around the system
Benefits
More news users make it though the registration process. Less fraught.
Posted on Utopian.io - Rewarding Open Source Contributors