4 ms·

I am not a webdev so I may be totally out of the loop here but when I was still in engineering school I was told to never trust a user just because of their ema

by Iv 8y ago

I am not a webdev so I may be totally out of the loop here but when I was still in engineering school I was told to never trust a user just because of their email because it can easily be spoofed. It is not the case anymore? And also I am a bit surprised that government employees don't have a way to authenticate themselves? I thought at least the president and several military staff already had secure phone that used the (kinda unluckily named) Isis network?

Arathorn 7y ago
the way the auth works is to send an email to the gouv.fr address to get the user to click a verification link. this should be fairly trustworthy (ignoring the bug here where verification mail got sent to the attacker’s address :|)