Hacker News new | ask | show | jobs
by abstrct 2105 days ago
This scares me a bit. A part of email validation is ensuring they actually own that account. It depends on the sensitivity of the service to an extent but I don't think it's appropriate to let somebody interact as if they were a specific email account until they've proven it's theirs.

Edit: I do like the recommendation of showing them the email they're waiting to validate so that they can see typos.