默认启用电子邮件规范化

[bloomexperiment (Tracey)]

@ted

例如，一个账户与 bob@discourse.org 绑定的用户可以创建另一个与 bob+again@discourse.org 绑定的账户。

Discourse 自带 normalize_emails 站点设置，可以启用或禁用此功能。启用后，它会将上述两个电子邮件视为相同的，用于唯一账户验证，Bob 将无法创建第二个账户。

为什么我们要更改它？

最近我们看到垃圾邮件注册量大幅增加，一些站点通过使用加号地址从单个电子邮件接收了数百甚至数千次注册。不用说，这种情况发生时会带来相当糟糕的意外。

很高兴听到这个消息。（我记得很久以前，这对 markersocial 来说是个大问题，他们不得不非常努力地推动对核心进行任何更改。）

Protecting against gmail dot trick in Discourse

Great thanks @sam and sorry I didn’t follow up on this yet. Yes it still seems quite viable to make a lot of accounts using this trick (2.5.0.beta1). For example, using the username+{randomstring}@gmail.com trick, someone created 748 accounts in the last 10hrs. They already have thousands of accounts on this single gmail address. Pretty much the only way for me to be able to remove them from the admin area is manually going to each account individually to suspend and/or delete them. It’s not …