3 ms·
> won't an individual have a reason to signup to all shady websites with their worst enemey's email address Well usually sites verify that the person signing u
by mhurron 11y ago
> won't an individual have a reason to signup to all shady websites with their worst enemey's email address
Well usually sites verify that the person signing up on a site is the owner of that address, in a large part for this very reason.
- sinatra 11y agoI've heard that AM didn't verify. And I'd say many shady websites won't.
- fredkbloggs 11y agoThat seems to be the case. But then one has to wonder why they bothered collecting the addresses in the first place. If I were running a service that most people would prefer others not know they use, and I were not verifying addresses, I would expect that very few of the addresses I'm given would be of any value. Since I haven't verified them, I can't really use them myself, and I'm not likely to find much interest if I try to sell them. So why even ask?
- vitoreiji 11y agoThat's a cheap form of plausible deniability, then.
- jlgaddis 11y agoHN doesn't, either.
- bjt 11y agoIn Django, as an example of one web framework, the email address would still be in the users table. There'd be a flag somewhere else in the database to indicate whether it had been confirmed or not. Only a sign up system that has separate storage for unconfirmed registrants, or that purges unconfirmed accounts after a period of time, would keep your email from showing up in the dump if a buddy signed you up as a prank.