Re:800M Email Addresses Leaked Online by Email Verification ...
by pintxo on Friday March 08, 2019 @03:40PM
(#19341940)
It unreasonable to assume anyone could ensure his email is kept private the moment she shares it with at least one other entity.
Rather than trying to fight windmills, it's better to use unique emails for sensitive/high-risk purposes. That way they cannot be used as primary key.
Company policy here is to never register any company account under a generic <[email protected]> email but use a partly randomized email for each provider <[email protected]>. That way no one can use one leaked email to even identify other services we use (think reset password/login dialogs leaking information about an email being registered or not).
Rather than trying to fight windmills, it's better to use unique emails for sensitive/high-risk purposes. That way they cannot be used as primary key.
Company policy here is to never register any company account under a generic <[email protected]> email but use a partly randomized email for each provider <[email protected]>. That way no one can use one leaked email to even identify other services we use (think reset password/login dialogs leaking information about an email being registered or not).