Your sign-up form is a weapon
Subscription bombing is an attack where someone uses bots to sign up a victim’s email address across hundreds or thousands of websites.
Every sign-up form on the internet that lets you enter any email address without verification is a tool they can exploit.
Our real users typically navigate from specific countries with a reasonable correlation to the daytime hours of that country.
If your sign-up form sends email to an unverified address, your form is part of this.
(For social auth sign-ups through Google or GitHub, we send the welcome email right away since those providers have already verified their email address.)
54 минуты назад @ bytemash.net
infomate
