4 ms·
No I've explained that it doesnt work because automated email scanners follow any link found in emails. The verification needs to happen in a POST request to av
by sph 3y ago
No I've explained that it doesnt work because automated email scanners follow any link found in emails. The verification needs to happen in a POST request to avoid that.
- solardev 3y agoWait, is this your article? If so, I'm confused... I thought you were arguing how annoying the UX is because of all those extra steps. If so, eliminating the subsequent links would make it faster. And once they're verified, they can stay verified and just log back in on another device with their password or a magic link. If you're more concerned about automated sign-ups, I don't really see how POST requests help. Those are also trivial to automate. Don't you need a captcha or ID.me or a credit card authorization or such? It seems like this particular combination of steps is both more annoying for real humans and also not very effective at stopping bots...?