3 ms·
Recall that the email requires some way to login, which is probably a password anyway. What do you gain in terms of security (rather than simplicity) by shiftin
by syrrim 9y ago
Recall that the email requires some way to login, which is probably a password anyway. What do you gain in terms of security (rather than simplicity) by shifting responsibility onto the email provider?
- hellofunk 9y agoMost email providers already implement (and with very large user bases which provide testing) all the features you'd have to implement yourself for proper security, like 2fa, password encryption, password reset workflows. To implement all that yourself, highly likely you will not do it as robustly as another provider. Also very costly in time.