4 ms·

> it makes very little sense actually It's actually one of the safest ways to offer email authentication.

• syrrim 9y ago
  Recall that the email requires some way to login, which is probably a password anyway. What do you gain in terms of security (rather than simplicity) by shifting responsibility onto the email provider?
  • hellofunk 9y ago
    Most email providers already implement (and with very large user bases which provide testing) all the features you'd have to implement yourself for proper security, like 2fa, password encryption, password reset workflows. To implement all that yourself, highly likely you will not do it as robustly as another provider. Also very costly in time.