Hacker News new | ask | show | jobs
by hanney 3695 days ago
A confirmed email address is probably the easiest point of user authentication.

Other than that - I totally agree with you that giving an email address away for sign-ups is pretty icky, but a necessary ickiness as there's not much else to choose from except OAuth (Google/Facebook/Twitter/LinkedIn/etc)