<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
Ryan, I'm having a look at the lucid chart now. In particular, I'm
looking at the bottom-right quadrant of the diagram.<br>
<br>
The user can be sent to the "account locked" screen as the result of
three actions:<br>
1) sign in<br>
2) delete account (from settings)<br>
3) change password (from settings)<br>
<br>
In the screen diagram, you have a verification screen with the text
'Account Reverified, Continue to "service"'. The "Continue to
service" portion is only going to be shown for case 1. That text
doesn't make sense in cases 2 and 3. We could print something like
"Your account has been deleted" or "Your password has been changed"
if the user verifies in the same browser and the original tab is
still open.<br>
<br>
I imagine the original tab, if still open and verification occurs in
the same browser, should complete whatever it was trying to do.<br>
<br>
If the user verifies in a second browser, I'm not sure what's best.
If the original tab is still open and we complete the action
(signIn, changePassword, deleteAccount), are we opening the user up
to being phished? Is a user who verifies in a second browser an edge
case and they need to restart the action they initiated in the first
browser?<br>
<br>
Thanks Ryan,<br>
Shane<br>
<br>
<br>
On 15/12/2014 17:42, Chris Karlof wrote:<br>
<span style="white-space: pre;">> + dev-fxacct, rfk, and
stomlinson<br>
><br>
> Francois is no longer on FxA. rfk and stomlinson are leading
the implementation of the locked account work. <br>
><br>
> -chris<br>
> <br>
><br>
><br>
> On Dec 15, 2014, at 7:07 AM, Ryan Feeley
<a class="moz-txt-link-rfc2396E" href="mailto:rfeeley@mozilla.com"><rfeeley@mozilla.com></a> wrote:<br>
><br>
>> Hi Chris and Francois,<br>
>><br>
>> Here’s a first attempt at describing the user experience
of the locked account state machine:<br>
>>
<a class="moz-txt-link-freetext" href="https://www.lucidchart.com/documents/view/a8190a33-b8f3-448c-bc9c-474528e46d37">https://www.lucidchart.com/documents/view/a8190a33-b8f3-448c-bc9c-474528e46d37</a><br>
>><br>
>> Am I close?<br>
>><br>
>> Let me know if I should resend this email to a list, and
which one.<br>
>><br>
>> Ryan Feeley<br>
>> UX, Cloud Services<br>
>> Mozilla UX<br>
>> IRC: rfeeley<br>
>><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1<br>
<br>
iQEcBAEBAgAGBQJUkE/2AAoJEEWxVe6aGsKINaAIAJdAOgOc5Hlu6MUUarZ7FSwt<br>
Cl9Uhuk/neTIrMKoUjJ27Rws0mMEMYDCBRn3fjsqu5r91y1pSqO35mXN6oz3SA5a<br>
gnWYjAnCRghJAMDHoSS4Eo8YV2m8P1B5O64ERm20eB9XW7/ETgwm/rJS+xxDhMmY<br>
asyDylIHa0hhdg6F241cxkndI6nJlu1YBEiSujaAUgXWQBedId7F8dg3nDfIyt+C<br>
IvfXkpQb7rqbIPKx24leN3AXCbCm36bPbSHTTg43VAVy58PUWkzpqXQ6HEiTuGcD<br>
qlSzJ9fC7I1Pc7iZSQq9KF5GOVhT0FJwRrGZ6jheMcFAMXkKiM0c77HrcSq7/JA=<br>
=SJWZ<br>
-----END PGP SIGNATURE-----<br>
<br>
</body>
</html>