How hard is it to implement email verification?

  • Wispy2891@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 hours ago

    But most oauth implementations use the user email as identifier so they get the email anyway

    • it_depends_man@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 hours ago

      All the smarter ones don’t because an email can change, your google account unique id will not, that’s the purpose of account IDs.

      I won’t deny that many people/websites probably do use email though. Which is bad. But I can’t deny that that probably is what is happening.