Send confirmation email when password changed

[edmorley]

Currently on PyPI, if a user changes their password, there is no email notification, meaning account compromise can go unnoticed.

Changing of password doesn't seem to be implemented on https://warehouse.python.org/ yet, but filing this now to ensure it's not forgotten :-)

[edmorley]

(And for that matter, I really hope the new implementation will require that the user confirm their existing password, rather than just allow changing it via the session cookie.)

[brainwane]

@edmorley Thanks for creating this issue, and sorry for the slow response!

The folks working on Warehouse have gotten funding to concentrate on improving and deploying Warehouse, and have kicked off work towards our development roadmap -- the most urgent task is to improve Warehouse to the point where we can redirect pypi.python.org to pypi.org so the site is more sustainable and reliable.

We're working on #2831 right now, which should also address this issue.

Thanks and sorry again for the wait.

[waseem18]

@di This looks like an issue I can work on (no assignee 😄 )

Will start working on this.

[di]

Ah sorry again @waseem18, this issue is going to get closed along with #2831 in the same PR.

[waseem18]

My bad! Can you please link me to an issue , I would be happy to work on it?

Thanks

[di]

@waseem18 #1886 might be a good one for you. Feel free to ask any questions on that issue.

[waseem18]

Thanks for the suggestion @di :)

I'll hop on to it.