|
|
|
|
|
by abstrct
2105 days ago
|
|
This scares me a bit. A part of email validation is ensuring they actually own that account. It depends on the sensitivity of the service to an extent but I don't think it's appropriate to let somebody interact as if they were a specific email account until they've proven it's theirs. Edit: I do like the recommendation of showing them the email they're waiting to validate so that they can see typos. |
|