3 ms·
>We ended up adding a custom page to handle e-mail validation so we could handle the situation where the user lands on the page and the address has already been
by dTal 4y ago
>We ended up adding a custom page to handle e-mail validation so we could handle the situation where the user lands on the page and the address has already been verified.
That's a yikes from me! So I can sign up on your service as anyone with an Outlook account, without verification?
- colejohnson66 4y agoI'd assume the custom page has a random URL and requires entering the email address (requiring a match) or clicking a button. I've seen some account confirmation pages like that.
- kevin_thibedeau 4y agoFacebook has allowed this in the past and someone recently opened an unverified Instagram account with my address.
- nieve 4y agoDiscord let someone sign up with my gmail email address, sent an email verification link, and before I saw either the "welcome to Discord" or "please verify your email" links they'd already let the person in as me. I don't know if this is because of google crawling links from mail or some other kind of failure, but I wasn't pleased that Discord would let someone impersonate me.
- sandermvanvliet 4y agoNo it would still require username/password. This was only verifying the email address was correct.