# About the idea: IDENTITY = EMAIL **URL:** \ **Category:** Site feedback\ **Tags:** email\ **Created:** [2015年十月18日 00:41 UTC](https://meta.discourse.org/t/about-the-idea-identity-email/34642 "2015-10-18T00:41:12Z")\ **Posts on this page:** 1\ **Showing post:** 14
**Author:** ![purldator](https://avatars.discourse-cdn.com/v4/letter/p/bcef8e/32.png) [@purldator](https://meta.discourse.org/u/purldator)\ **Post date:** [2015年十月19日 05:22 UTC](https://meta.discourse.org/t/about-the-idea-identity-email/34642/14 "2015-10-19T05:22:52Z")
> [@Fabio\_Machado\_de\_Oli](#): > > Reddit is one example, you don’t need an email address for creating an account there. > > Sometimes lowering the barrier to enter beats controlling spam > [@jd2066](#): > > Until reading this the topic Reddit OAuth/API Support the other day, I didn’t know that about reddit didn’t require an email address.Your reply does remind me though that, that was also a topic where the idea of IDENTITY = EMAIL was presented and part of the reason I started this topic. That sounds like a potential repeat of [this](https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050/). > [@Dealing with unwanted (and probably spam) accounts via SSO?](https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050/27): > > Oh! This is important! Discourse is assuming that your Wordpress site is performing full vetting of all the accounts before allowing them to sign on to the forum. So all of the Discourse spam protections - blacklisted email domains, IPs, per-IP ratelimits, javascript-required two-click account activation, “per-IP user limit until one of them comes back on 15 different days” - are effectively turned off. Using reddit as auth invites pain. **Pain.** Like me going into a battle wearing armor made of bologna. --- _[View the full topic](https://meta.discourse.org/t/about-the-idea-identity-email/34642)._