|
|
|
|
|
|
by georgyo
1485 days ago
|
|
|
No, many sites let you continue to use your account _before_ you validate your email address. They let you configure settings and explore before the address is validated. An attacker can use this to poison an account without ever having access to the actual email address. |
|
|