4 ms·
Wait so I can post data using any email with no security by default? That seems like a really bad idea. I get you’re trying to be clever but damn. Can’t possibl
by dawnerd 8y ago
Wait so I can post data using any email with no security by default? That seems like a really bad idea. I get you’re trying to be clever but damn. Can’t possibly see that causing a problem.
- rlonn 8y agoWhat is the threat scenario you see?
- gitgud 8y agoSpamming the server with millions of unique but unverified email addresses, it will store anything you throw at it...
- rlonn 8y agoI wrote about that just now: there are rate limits in place to prevent it. You'd have to go to quite a bit of trouble to be able to use the system for any kind of effective spamming, coming from different unique client IPs and only send a few emails from each of them, and not send too many emails to the same domains (e.g. spamming gmail.com would be impossible).