Lack of interest Invalidate session after email change

This suggestion has been closed automatically because it did not receive enough votes over an extended period of time. If you wish to see this, please search for an open suggestion and, if you don't find any, post a new one.
duderuud

duderuud

Well-known member
How to reproduce:

Multiple browsers on the same device

  1. Log in to your account from two different browsers.
  2. Change the email address in the settings from one browser.
  3. Without logging out, check the other browser.
  4. The session is "updated" instead of being invalidated.

Multiple computers

  1. Log in to your account from two separate computer systems.
  2. Change the email address in the settings from one computer.
  3. Without logging out, check the other computer.
  4. The session is "updated" instead of being invalidated.

Please invalidate the session after an email change to enhance security.
 
Upvote 1
This suggestion has been closed. Votes are no longer accepted.

Similar threads

Steffen
  • Suggestion Suggestion
Invalidate Session on 2FA Activation/Change
Replies
1
Views
100
Kirby
K
Donica
  • Locked
Not a bug Email Change After Registration
Replies
1
Views
627
Paul B
P
Back
Top Bottom