Why do so few websites use email addresses as usernames?

[edprush]

There are a few sites that require the user to register their email address as their username.

Why do you think this method is so infrequently used?

 

[jhayx7]

Spam bots.

 

[compuwiz1]

Can you say spam?

 

[Gunslinger08]

Forums? Spam. Commerce sites? Phone and Fax orders which can't require an email address to generate an order.

 

[mjrpes3]

I like using email as the username, but you have to be careful. I once received a phishing email, forget whether it was spoofing amazon or maybe paypal. But the spoof was very well done. The link you clicked took you to a fake login page, where the username was prefilled with your email address. It's readily apparent how to do this, but for a couple seconds it fooled me and I thought, "whoa, maybe this really is amazon".

 

[edprush]

Originally posted by: joshsquall
Commerce sites? Phone and Fax orders which can't require an email address to generate an order.

Please explain. "Can't require"?

 

[Gunslinger08]

Originally posted by: edprush

Originally posted by: joshsquall
Commerce sites? Phone and Fax orders which can't require an email address to generate an order.

Please explain. "Can't require"?

If they're using an email as their primary key and someone submits an order via phone or fax and doesn't have an email, what do they do?

 

[edprush]

Would it be okay to use email addresses as the login username on sites that don't display the login to the public? For example, bank account logins or login for you electric bill?

 

[Gunslinger08]

Originally posted by: edprush
Would it be okay to use email addresses as the login username on sites that don't display the login to the public? For example, bank account logins or login for you electric bill?

I probably wouldn't, for security reasons. If someone knows your email, they know your username. Keeping usernames and emails separate adds a small amount of security.

 

[GeekDrew]

I can think of several instances in which I have multiple accounts on a given system, with different user names, but identical email addresses (and yes, for completely legitimate purposes). It's helpful to not use email address as a primary key for situations such as that.

Also, how about when people change their email address? I've seen a *ton* of systems/applications that do not permit changing the user name / email address (when it is used as a user name). That bothers the hell out of me... why can't they just use an autonumber as primary key, and reference the account with it, rather than hard coding the user's username or email address into whatever other tables? In those instances, you'd be screwed if your email address changed, as you would have to set up another account. Yes, that is poor design (in my opinion), but *many* websites do that.

 

[sdifox]

I would rather not advertise my email addr. Even if it is a first layer email addr designed to trap spam.

 

[topslop1]

so you can't be spammed.

 

[SonnyDaze]

Originally posted by: compuwiz1
Can you say spam?

Damn I'm hungry now. Fried Spam sammich with cheddar cheese....Yummy!!!

 

[edprush]

Originally posted by: GeekDrew
I can think of several instances in which I have multiple accounts on a given system, with different user names, but identical email addresses (and yes, for completely legitimate purposes). It's helpful to not use email address as a primary key for situations such as that.

Excellent reason! You have influenced my decision greatly. Thank you.

 

[GeekDrew]

Originally posted by: edprush

Originally posted by: GeekDrew
I can think of several instances in which I have multiple accounts on a given system, with different user names, but identical email addresses (and yes, for completely legitimate purposes). It's helpful to not use email address as a primary key for situations such as that.

Excellent reason! You have influenced my decision greatly. Thank you.

Wow... I need more sleep. I'm sure I meant "unique index" rather than "primary key".

 

[andy04]

its generally pretty long... can be a pain in the rear end if auto fill is not on
and then obviously Spam is another thing

 

[JeffreyLebowski]

Originally posted by: edprush
Would it be okay to use email addresses as the login username on sites that don't display the login to the public? For example, bank account logins or login for you electric bill?

Doesn't matter, chances are the bank or company is just going to sell you email list to someone anyways.