A quick housekeeping note:
Just FYI, this is a bit out of date, e.g. referring to the airdrop claim site which is now more about selecting a delegate. Reinforcing the question by @water3_eth, the participant request form doesn’t apparently work, even after waiting a while longer than the stated processing duration.
Thanks @water3_eth for answers!
Who determines if the developers complied in the second step, and what if they don’t (even unintentionally, e.g. with bugs)?
Who reads and handles the reports from that third step? If it’s a rules-based algorithm, what’s to stop an army of bad-faith flaggers from using reports to silence those whose views they disagree with, or for other harassment purposes?
Do you have a marketing plan for that?
As an update to my prior post on account ownership, stories like this one (paywall warning) might help you make the point that account ownership is pretty important.
That is true; I was mostly making the point that your solution helps with the weak-password risks but didn’t say so very elegantly.
Have you solved this issue (also discussed in a forum that allows replies here)?
Do you allow users to log into a single account using multiple different device-bound keys?