I have just been told that in order to delete my Stack Overflow account I need to email [email protected].
What is the reason behind not providing privilege to a user to delete their own account?
Meta Stack Exchange is a question and answer site for meta-discussion of the Stack Exchange family of Q&A websites. It only takes a minute to sign up.
Sign up to join this communityI have just been told that in order to delete my Stack Overflow account I need to email [email protected].
What is the reason behind not providing privilege to a user to delete their own account?
Rare destructive functions shouldn't have a single button interface because that encourages misuse and mistakes.
Think about the number of calls of people that accidentally deleted their account. It is much easier to delete some accounts on requests than to restore a deleted account (if that's even possible).
Although it would be a fun (but useless) 50k Privilege.
It is quite possible for someone to take over someone else's account, and the last time I checked user deletion is a non-reversible process, by which I mean that it is not a single button undo, but requires a non-trivial amount of work to undo.
For instance, were I to sit in a cafe near Jon Skeet, sniffing the packets as he answered questions on stack overflow, I could readily cause actions on his behalf on the site. This is because there is only a limited amount of security on the site.
It is also one of the reasons why high reputation, trusted users are still subject to bot detection algorithms.
Email confirmation would be great, except that once you're spoofing another user you can readily change their email. They could change the system and require email confirmation of email changes, etc, and lock things down further, but at the moment they don't, and there's a good chance that if I'm sitting at a cafe next to another stackoverflow user, it's likely that I've got enough information to deal with trivial email problems as well.
Account deletion is not something to be done lightly, and so even if we overcame all the security issues, stackoverflow still has a need to understand why users want their accounts deleted, and how far that extends into site content - in some very rare cases it's reasonable to delete the user's questions and answers, but in most cases it's not. The team needs to understand the situation before such actions are taken.
Please note that accounts can self-delete, provided they haven't voted/posted/etc more than once.