|
|
| Line 73: |
Line 73: |
| * Firefox reuses Sync credentials | | * Firefox reuses Sync credentials |
| * Firefox can verify the email proactively before first-use | | * Firefox can verify the email proactively before first-use |
|
| |
| = Requirements =
| |
|
| |
| ;Service
| |
| * Service shares user DB with Firefox Sync
| |
| * Supports multiple email addresses per account
| |
| * Email addresses must be verified before they can be used for sign-in
| |
| * Service implements verified email protocol [todo: link to protocol spec]
| |
|
| |
| ;HTML Client-side Implementation
| |
| * Implements verified email protocol JS API with a library
| |
| * Supports IE 8+, Chrome, Firefox 4+, Safari 5
| |
| * JS library must disable itself if the browser natively implements the API
| |
| * Allows user to sign-in to Mozilla service, using an email and password
| |
| * Allows user to register a new Mozilla account
| |
| * Implements email disclosure flow once signed in
| |
| * Communication with the user is done via pop-ups (to prevent clickjacking)
| |
|
| |
| ;Admin Interface
| |
| * List and manage email addresses (verified and unverified)
| |
| ** Add, remove address
| |
| ** Re-send verification mail
| |
| * List sites where Mozilla ID has been used to sign in
| |
| ** Include a timestamp for the last time a sign-in occurred
| |
|
| |
|
| = Operational Requirements = | | = Operational Requirements = |