As of bug 589979 (Fx Sync 1.5b3), users sign up with just an email address. The username is generated by hashing the email address. When logging into an existing account, Fx Sync will check whether the account name contains any characters not allowed in the username (such as the @ from an email address). If not, it's an old account. If yes, the username is generated like this: username = LowerCase(Base32(SHA1(LowerCase(accountname)))) The web pages that allow users to delete their account and reset their password should do the same: accept both old fashioned usernames and email addresses, using the above conversion to get the username from their email address.

just noting the sites: https://services.mozilla.com/delete-account/ https://services.mozilla.com/reset-password/

This has the x-forwarded-for fix as part of the diff, I miss Hg already.

Pushed to prod, should be live within 15 minutes.