Troy addresses this in this blog post: http://www.troyhunt.com/2015/11/im-sorry-but-your-email-address-is-not.html http://www.troyhunt.com/2015/11/im-sorry-but-

Troy addresses this in this blog post: http://www.troyhunt.com/2015/11/im-sorry-but-your-email-address-is-not.html http://www.troyhunt.com/2015/11/im-sorry-but-your-email-addr... IMHO it's not worth the 16 gigs of storage, the time it takes to sanitize, process & store all the hashes, nor the incredibly minor risk that somebody could intercept it going over HTTPS from your browser to his app server - data which is already public anyway.