3 ms·
There's only one sensible validation script: "Send an email with a confirm link".
by ori_b 11y ago
There's only one sensible validation script: "Send an email with a confirm link".
- GauntletWizard 11y agoSadly, if you're sending e-mail sanely, your mail provider likely validates recipients, and will be annoyed at you if you send them recipients they think are bogus.
- belovedeagle 11y agoThe relevant rfc (on mobile; don't remember which) specifically states that intermediate servers must not validate mailboxes (local parts). And honestly the domain should be "validated" by the server doing an mx lookup; let dns handle it.
- sk5t 11y agoTaking action with side-effects on entirely unvalidated user input is usually a pretty bad idea.