2 ms·
Proof of ownership of an email address is often used to prove ownership of an account on a third-party site. Common examples are "forget password" workflows an
by cldellow 5y ago
Proof of ownership of an email address is often used to prove ownership of an account on a third-party site.
Common examples are "forget password" workflows and Spotify/Slack's magic login link workflows.
If you own the transactional mail service through which all these flow, you are now responsible for the security of a large chunk of the Internet.
- nly 5y agoThe same is true for services that offer "Login with Google" etc. It's actually really bad that I can sign up with many services using a traditional email and password combo and the "Login with..." options work straight away. They really should be opt-in for security.