Would this be sent to any user who creates an account and never confirms the email? I think that would be some pretty useless email in that case.

I'd narrow it down to users who are active past the 30 day mark and haven't confirmed their email yet. Also, I'm not sure if this belongs in Echo or whether it should go into it's own extension.

Steven and I were talking about this one and we came to the conclusion the notification should actually be triggered after 48 hours or first edit, whichever comes first. As for how the notification is sent? Echo. No question, we need to stop inventing new notification methods in every feature and start relying on each for this kind of thing.

Confirmation email doesn't play into it at all since the whole point is that the user has not entered an email for their account…?

@Kunal, ah! I understand what you meant, a user who has entered an email address but not verified it. That is a separate but related issue. Can we either log it or link it to this one please.

(In reply to comment #2)

Steven and I were talking about this one and we came to the conclusion the
notification should actually be triggered after 48 hours or first edit,
whichever comes first.

I think after the first edit might be a bit too quick, if the confirmation email hasn't made it yet (or they're more concentrated on editing!), then the notification isn't very useful. I like the time period idea better.

As for how the notification is sent? Echo. No question,
we need to stop inventing new notification methods in every feature and start
relying on each for this kind of thing.

Agreed, but that's not what I was talking about. I was asking whether this feature should live in the Echo extension or if it should be in a separate extension that integrates with Echo, like how Thanks is.

Confirmation email doesn't play into it at all since the whole point is that
the user has not entered an email for their account…?

D'oh. I wasn't thinking.

Basically the rational for after first edit is that now you've "done something worth saving" that can even be the call to action in the echo notification. e.g. Protect yourself from account access issues, and make sure you are alerted to changes on $articlename, add an email address to your account now for password resets and notifications."

Basically the rational for after first edit is that now you've "done something worth saving" that can even be the call to action in the echo notification. e.g. Protect yourself from account access issues, and make sure you are alerted to changes on $articlename, add an email address to your account now for password resets and notifications."

I was originally thinking this bug would cover both people without any email and people without a confirmed email. In either case, I was thinking only web notifications, since sites generally don't email a non-confirmed address more than once (the initial confirmation email).

However, I've created bug 56074 for the case where they have one, but it's not confirmed.

The WMF core features team tracks this bug on Mingle card https://mingle.corp.wikimedia.org/projects/flow/cards/385, but people from the community are welcome to contribute here and in Gerrit.

Certainly we need this for unconfirmed emails, ala T58074

But this seems to be becoming a wider problem. Users that are long established, with many edits are losing their accounts because of making a mess of their password changes, no email set for recovery, and not knowing anyone else onwiki who can help validate their identity

I think there's scope to do this X time after signup, and probably periodically generally for everyone else. Whether on a login action, or triggered by a maintenance script

A cheap way of doing this would be to use a different message for the 100th / 1000th / etc edit congratulory Echo notification if the user does not have a confirmed email address.

I'd prefer a maintenance script to trigger those notifications. Per T58028#3097853, the next edit congratulory notification may be difficult to reach when it's reaching large numbers. This would give site owners a lot of control of when those messages should be sent (once a week, a month, etc).

Ideally, if the previous notification of the same type hasn't been marked as read, it shouldn't generate a new one, or it can delete it and create a new one.