3 ms·

> The whois check for a domain literally contains when it will expire. You can do this one time (combined with an MX lookup) while the email is added. That’s n

by oefrha 4y ago

> The whois check for a domain literally contains when it will expire. You can do this one time (combined with an MX lookup) while the email is added. That’s not reliable. A domain can be deleted before expiration.

amenod 4y ago
Sure, but that is usually by the request of the owner, if I'm not mistaken? Better cover most of the cases than none.
- oefrha 4y ago
  All I’m saying is if you’re building such a system you should be aware of this and possibly account for it with some low frequency scanning before listed expiry. Or not, if you decide it’s not worthwhile.
  - amenod 4y ago
    Fair enough.
eszaq 4y ago
Could also be renewed
cookiengineer 4y ago
Alternatively you could do a whois query of the domain (and verify against cached details) before sending out the recovery email. It's probably best to do that every time the email addresses are changed or updated.