having some kind of system that could allow people to legitimately transfer usernames securely
That sounds as if it should be pretty simple to implement.
The main thing preventing traded accounts from being secure is, as far as I know of, the fact that (a) you can’t ever remove the first email address from the account + (b) you can always regain access to an account if you control an email address validated for the account.
But if there were some DW tool that deleted all registered email addresses from the account, then it should be as secure as a newly-created one.
Perhaps something like the way domain transfers work?
The “seller” goes to a special page that generates a secret code for that username, which they than pass on to the “buyer”. The buyer then goes to a page that lets them enter the username they want to receive, the secret code, and an email address and password (kind of like signing up for a new account). The system checks whether the secret code matches the username and if so, deletes all email addresses currently on the account and sets the password and the first email address to whatever the “buyer” entered.
no subject
That sounds as if it should be pretty simple to implement.
The main thing preventing traded accounts from being secure is, as far as I know of, the fact that (a) you can’t ever remove the first email address from the account + (b) you can always regain access to an account if you control an email address validated for the account.
But if there were some DW tool that deleted all registered email addresses from the account, then it should be as secure as a newly-created one.
Perhaps something like the way domain transfers work?
The “seller” goes to a special page that generates a secret code for that username, which they than pass on to the “buyer”. The buyer then goes to a page that lets them enter the username they want to receive, the secret code, and an email address and password (kind of like signing up for a new account). The system checks whether the secret code matches the username and if so, deletes all email addresses currently on the account and sets the password and the first email address to whatever the “buyer” entered.