3 ms·
Why not emphasise user privacy more by hiding emails. eg "An email should be sent to the address above. For user privacy, we cannot confirm if it exists." I wo
by Joakal 15y ago
Why not emphasise user privacy more by hiding emails. eg "An email should be sent to the address above. For user privacy, we cannot confirm if it exists."
I wonder how many emails scrapers have done of Forgotten Email pages.
- T-hawk 15y agoThis could work, but there's still vulnerabilities. How about a timing attack? The page with that message probably responds faster if the email address doesn't exist. (Sure, a timing attack can be fixed if you can make the page run in constant time; but is it really cost-effective to spend time developing that rather than actual features?)
- Joakal 15y ago1) Validate email address. 5-10ms 2) Send a non-blocking request with a flag, eg "Good" "Bad". 3) Return message to user that email has been sent but can not confirm if the email is true for privacy reasons. While yes, it can be down to a timing attack, the trouble is that this vector can be used against sessions, logins, etc. It can be a standard that Mozilla should adopt.