| > TL;DR: Don't overthink it, just send a verification email. pretty bad advice, if taken only as written, without adding more flavor on top. the major email providers will penalize you if you generate too many undeliverable emails. thus, if you just send a verification email without any pre-validation, it's pretty easy to get into a DoS situation where current/valid users don't get important email sent to them, or that email is significantly delayed, plus incur huge operating cost to resolve the problem. some form of rate limiting is needed, plus IMHO it's better to use a verifier service or your own heuristic or ML model to test for email validity including valid but fake/spammy/disposable addresses. sorry, but we are way past the point of being able to have nice things, esp. when we're talking about email. the "lies" part of the content is great. people do assume all those wrong things. however the TLDR is just wrong, and potentially harmful. |
What pre-validation could you do that would possibly be useful?