4 ms·
So you use email/pass and the reset password email dumps right to the new party as well, because they control the MX records for the domain?
by horsawlarway 2y ago
So you use email/pass and the reset password email dumps right to the new party as well, because they control the MX records for the domain?
- lxgr 2y agoThat's why allowing account recovery using (exclusively) email is indeed a security problem.