Jan

Hamburg, Germany

Age: 34

Jul
16
awarded Popular Question
Jul
16
awarded Popular Question
Jul
2
awarded Curious
Jul
2
awarded Curious
Jun
21
awarded Yearling
Jun
21
awarded Yearling
May
31
awarded Notable Question
May
24
awarded Yearling
May
24
awarded Yearling
Apr
28
awarded Good Answer
Mar
8
awarded Yearling
Mar
8
awarded Yearling
Jan
31
awarded Nice Question
Jan
27
awarded Nice Answer
Jan
3
comment Secure but still usable license key retrieval mechanism?
I see where you're coming from and I have seen this message as well, but my fear is that many users won't actually read it: first, on the web, the majority of users scans text rather than reading it, and entire blocks of unexpected text might end up ignored. Second, in the user's mind, the next step in the process of retrieving the key would be to check their mail, so they likely won't stay on the web page to see what comes next there.
Jan
1
awarded Nice Answer
Dec
31
comment Secure but still usable license key retrieval mechanism?
I like the idea of adding an additional piece of information. I wouldn't go for the ZIP though, as the format varies between countries (e.g. US vs. UK ZIPs, so it's hard to normalize) and the user's ZIP can change over time. A better option could be the date of birth or some other piece of information that is constant and tied to the buyer's person. I'd also make it mandatory to enter it, since we're protecting the business interest. I would, however, make it clear to the user that the date of birth is necessary to retrieve the key later, so that they understand they shouldn't enter fake data.
Dec
26
comment Secure but still usable license key retrieval mechanism?
Yes, just the license key gets displayed, which would essentially give an attacker a free license of the software - no other user data (apart from the e-mail address the attacker has entered) is involved. I like your idea of informing the user about this, but I doubt they will be very interested to follow up, as they lose nothing.
Dec
20
awarded Student
Dec
20
asked Secure but still usable license key retrieval mechanism?
1 2 3 4 5