1 comment

[ 3.1 ms ] story [ 9.0 ms ] thread
"We don't check that the user is authoritative for an email address, some thought needs to go into how we prove a user has access to an email address in a federated system."

Ideas?