3 ms·

Without a code, there is a pretty high risk of an attacker social engineering an account holder into sending an email. I haven't really thought this through (w

Without a code, there is a pretty high risk of an attacker social engineering an account holder into sending an email. I haven't really thought this through (what an attacker would gain), just want to point out the general risk.

chunkyguy 4y ago
But the code is already part of generated email, the one that the user needs to send hello to.
- perlgeek 4y ago
  Ah, I think I misunderstood your proposal. Do you want to put the code into the recipient email address?