[remram]

You might as well use something out-of-band to verify emails, like PGP.