I don’t think there’s an infinite number of email addresses. The ‘username’ part is limited to 64 chars, while it almost never exceeds 20 (or even less). The n

I don’t think there’s an infinite number of email addresses. The ‘username’ part is limited to 64 chars, while it almost never exceeds 20 (or even less). The number of domains is also a fixed number at any given time, while I suspect that 10 domains contain over 80% of e-mail addresses I didn’t see the email API and it is not obvious to me if this breaks any privacy protection (or what is the threat), but generating a lot of SHA-1 hashes for popular gmail addresses is probably very possible