Users who log into a site via distributed auth don't have a {users}.mail field by default. We should prevent such users from being able to subscribe to issues until they enter an e-mail address, to prevent bugs trying to send messages to empty addresses.
Comments
Comment #1
dwwI committed a fix and will deploy it with the next round of changes going live in a little while.