5 ms·
> From a service provider's point of view [1], a big portion of "users" with disposable email domains have intention to do bad things, e.g., spamming From a se
by teakettle42 5y ago
> From a service provider's point of view [1], a big portion of "users" with disposable email domains have intention to do bad things, e.g., spamming
From a service user’s point of view, a big portion of “services” that demand their real email address have intention to do bad things, e.g. spamming
- Spivak 5y agoFine, you don't have to provide your real email and can use a forwarding service. I'm gonna need you to verify your non-voip phone number, submit a picture of your government issued ID and a photo of yourself in a specific random pose as a liveliness check, or register a valid credit card in order to activate your account. Services use emails from well-known providers specifically because they're "good enough" signal in terms of spam/bot avoidance. It's not like the need for those signals go away and "real emails" are one of the most privacy preserving because they're pseudoanonymous. The alternative is Real Name policies.
- deleted 5y ago[deleted]
- 3np 5y agoI really don't see how "determine unique legal identity" is such a requirement? What are you running, e-voting? If that's really what you need, the relevant jurisdiction is likely to have some adopted e-identity system. If not, go back and question how you can solve your issues with as little PIIs as strictly necessary.
- Spivak 5y agoWe did, it's called non-disposable email. A non-unique pseudoanonymous identity that's somewhat difficult to mint in bulk. If you don't like "accounts of well-known service providers" -- email or login-with-whoever then sources of identity that "everyone" has that are hard to get many of are government ids, phone numbers and credit cards. Like what else is there? For super technical people we could do something like "proof of bitcoin address" where we verify control of a wallet with some minimum long-standing balance. We could make you submit a recording of yourself saying some random phrase and then do some facial recognition to detect duplicates. IP banning hasn't worked since the 90's.
- sahkopoyta 5y agoI don't really get this. Where do you draw the line between disposable and non-disposable email? What prevents anyone from creating <random string>@gmail.com addresses?
- Spivak 5y agoNothing, but if you try to create 1000 of such emails you’ll get banned by Google.
- franga2000 5y agoA normal user wouldn't make anywhere near that many and to a bot developer, "banned by Google" doesn't present even the slightest of challenges. Source: I develop web scrapers for many sites that really don't want to be scraped, including Google/Abc properties.
- josephcsible 5y agoThe phone number requirement?
- sahkopoyta 5y agoSee my other comment. Gmail was bad example, outlook has no restrictions.
- lategloriousgnu 5y agoYou need a valid phone number to create a gmail account, and you can only have a few accounts attached to the same number. Google is "trusted" because they actively try to prevent spammers from joining their platform. Disposable email platforms don't, they let you create as many as you like.
- sahkopoyta 5y agoOk my bad gmail was not a good example. Lets go with outlook account then. Just tried and it definitely doesn't need phone number. And I wouldn't consider outlook disposable platform.