About the idea: IDENTITY = EMAIL

[purldator (mountain)]

@Fabio_Machado_de_Oli

Reddit is one example, you don’t need an email address for creating an account there.

Sometimes lowering the barrier to enter beats controlling spam

@jd2066

Until reading this the topic Reddit OAuth/API Support the other day, I didn’t know that about reddit didn’t require an email address.Your reply does remind me though that, that was also a topic where the idea of IDENTITY = EMAIL was presented and part of the reason I started this topic.

That sounds like a potential repeat of this.

Dealing with unwanted (and probably spam) accounts via SSO?

Oh! This is important! Discourse is assuming that your Wordpress site is performing full vetting of all the accounts before allowing them to sign on to the forum. So all of the Discourse spam protections - blacklisted email domains, IPs, per-IP ratelimits, javascript-required two-click account activation, “per-IP user limit until one of them comes back on 15 different days” - are effectively turned off.

Using reddit as auth invites pain. Pain.

Like me going into a battle wearing armor made of bologna.