Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Why Do We Send Confirmation Emails?

What good does it do to require the user to provide an email address, just so we send him/her one email to complete the registration process? It certainly won't protect against (D)DoS attacks, and I don't see how it increases security.

like image 911
Maxpm Avatar asked Dec 21 '22 10:12

Maxpm


1 Answers

The first thing that comes to my mind is that it allows them to actually confirm the account. Its a simple thing that double checks that the user actually signed up for the account and actually wants it. (See Scenario)

Scenario A:

I hate George so I am going to sign him up for all of these websites. That way he gets all this mail from them that he does not want.

Scenario B(Exaggerated)

Someone decides to register a billion accounts. With no confirmation your site now has a billion accounts that are never going to be used. Also if these are legit emails then a legit user could not register with them. (Again much more unlikely to happen)

like image 113
sealz Avatar answered Feb 03 '23 23:02

sealz