Hacker News new | ask | show | jobs
by whatshisface 4840 days ago
If I knew your email, I could make an account on a website in your name without you knowing.
2 comments
yjyft846jh 4840 days ago
I don't see how that would cause a problem. If the website ever sent an email to me, I would know about it and just be able to do password recovery and delete the account. If the website never sends an email, it's of no inconvenience to me.

In that case is this not just functionally equivalent to sending a validation email upon account creation, as many sites do already?

link
gcr 4840 days ago
Why?

If you know his email, then the website's confirmation link will still go to his inbox.

If you know his email and password, then Persona wouldn't help anyway.

link