3 ms·
It is irresponsible to send more than one email to a user-submitted address without verifying it. Otherwise abusers can use you to get emails sent to someone th
by rlpb 13y ago
It is irresponsible to send more than one email to a user-submitted address without verifying it. Otherwise abusers can use you to get emails sent to someone they are targeting.
Since you can only send one email, it has to be the verification email.
You need to send the verification email at registration time, since users are likely to mistake it for spam if you send it at some arbitrary point later.
If, on the other hand, you have no need to send email at all, then there's no need to collect the address and thus no reason to verify it.
- Kequc 13y agoWhat about sending them a welcome email that gives them the opportunity to verify.
- rlpb 13y agoMany users will see the first few words of the welcome. Few will read enough to realise they can verify. Even fewer will actually verify. Later, your users will wonder why they're not receiving emails from you. If you send them out despite not having verification, then you've got the abuse problem again. Abused (non-)users will just see every email as spam and ignore them, including the first welcome one. If you continue to send emails out, they will continue to be abused.
- Kequc 13y agoWhy is it better to force them to verify the email and then just start sending them email as through they confirmed that they wanted to receive any?