Tag Info

New answers tagged


It depends how much verification you want. You can verify that the ID number entered matches the details supplied (assuming that whatever nation the ID card belongs to provides some sort of API to do this - lots of countries don't even have standard ID cards though), but all that proves is that the person entering the data knows both the card number and the ...


From a security standpoint, I can't see any problem with this flow. It actually may be more secure than requesting user details and then verifying the email address. A user could enter an incorrect email address end end up giving access to their account to a random third party. In your scenario, there is no account to access. You will have the possibility ...

Top 50 recent answers are included