Re: [webauthn] Why not email/username as user.id / user handle? (#1763)

> I don't really see the problem with things like "divorce, leaving domestic violence, ...". More like when changing one's username/email/phone

I want to address this specifically. Because these things are very related.

I used to work at a company that made your username "first letter of given name, and lastname". So for me, wbrown. Now imagine you married someone, and took their lastname. Lets say in my case I married Alice Green (exampple name). And I changed my name to William Green. I join this company and that's my username. wgreen.

Now something happens between Alice and I. Something that hurts deep inside, and causes huge pain. Every day at work I login with wgreen. A reminder of the person who inflicted so much harm. 

It's not just a "change of username/email". It's a change of identity, and allowing someone to not have to have reminders of horrors. That's why it's so important that these values are *not* used as primary keys and identifiers anywhere because developers get into these weird "oh we can never change it" positions. 

-- 
GitHub Notification of comment by Firstyear
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1763#issuecomment-1176853347 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 6 July 2022 23:28:00 UTC