How hard is it to implement email verification?

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 months ago (2 children)

But most oauth implementations use the user email as identifier so they get the email anyway

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 4 months ago (1 child)

    All the smarter ones don't because an email can change, your google account unique id will not, that's the purpose of account IDs.

    I won't deny that many people/websites probably do use email though. Which is bad. But I can't deny that that probably is what is happening.

  • source
  • parent
  • hideshow 1 child comment