7 ms·
great idea. I think you can give the user the option to specify the email hash (MD5 maybe) instead of clear text email. so either: <form action="//api.formsp
by maouida 13y ago
great idea.
I think you can give the user the option to specify the email hash (MD5 maybe) instead of clear text email.
so either:
<form action="//api.formspree.com/user@example.com">
OR
<form action="//api.formspree.com/b58996c504c5638798eb6b511e6f49af">
You can provide the user a small tool to generate the email hash.
Good luck
- icebraining 13y agoBut then how can they know where to send the email to?
- maouida 13y agoThey have the email (confirmed email) in their DB. they can easily calculate the hash on the fly.
- cbhl 13y agoI'd use base64 instead of a MD5 hash, but I'm not a huge fan of security by obscurity.
- Scryptonite 13y agoThis might also work: <form action="//api.formspree.com/user.smith/gmail.com"> Truthfully, base64 is probably better at deterring email harvesters.
- jodrellblank 13y agoGravatar uses MD5(email) as an identifier, so using that would potentially identify the recipient quite easily.
- joshmlewis 13y agoBut it's good enough that an auto scraper or spam bot will find it easily.
- maouida 13y agoThe recipient can be identified by email or md5(email).