The problem is that a negotiate-then-validate strategy is just a prettified form of blackmail.

ECONOMIST: Bagehot

After entering the target email address in the password reset form you can then select to answer security questions to validate your identity.

ENGADGET