Timeline for Why is email often used as the ultimate verification?
Current License: CC BY-SA 4.0
28 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 15, 2021 at 23:39 | comment | added | Aleksey F. |
However for most people, their email service provider can read all their emails, can see what is being sent, and can send email themselves as "you". That is why the only way is to have an own email server rather than using external email service. Then, to have own IT infrastructure for electronic communications. It is not so difficult today owing to computing performance. Even then, you have to trust to hardware and software developer and rely on cross-verification of code and hardware.
|
|
| Jan 15, 2021 at 9:30 | comment | added | oligofren | computerworld.com/article/2552992/not-so-unique.html | |
| Jan 14, 2021 at 22:08 | comment | added | user3810626 | People use SSN for account identifiers? I remember that coming up in a meeting once (for constructing/contracting software) and discovering that you couldn't use SSN as an identifier—because it's not unique! Many, many employees of a contractor might in fact have the same SSN. | |
| Jan 13, 2021 at 16:08 | comment | added | jrw32982 | @JohnP Even then you have to trust the Post Office | |
| S Jan 4, 2021 at 15:45 | history | suggested | deep64blue | CC BY-SA 4.0 |
Tidied up the language.
|
| Jan 4, 2021 at 15:19 | review | Suggested edits | |||
| S Jan 4, 2021 at 15:45 | |||||
| Jan 4, 2021 at 9:51 | comment | added | corsiKa | The largest email provider in the world used to promise they wouldn't be evil, so I'm sure we have nothing to worry about. | |
| Jan 4, 2021 at 6:36 | comment | added | JonathanReez | @Polygnome and only a few thousand people control 51% of BTC mining, most of them in China. It would be fairly trivial for the Chinese government to take over Bitcoin entirely if they wanted to or at least damage it significantly to erode public trust. | |
| Jan 4, 2021 at 4:18 | comment | added | Nelson | Most people do not understand blockchain enough to know why it is secure. With blockchain, you need to secure the infrastructure, and not just "one device". As @Polygnome mentioned 51% attacks, there is also 34% attack. Due to how blockchain works, they are more secure, but compromised systems are also harder to restore, and you may not be able to directly fix bad data written by malicious attacks. | |
| Jan 3, 2021 at 16:06 | answer | added | Jason | timeline score: 0 | |
| Jan 3, 2021 at 15:57 | answer | added | mostlyWright | timeline score: 0 | |
| Jan 3, 2021 at 0:17 | answer | added | Schwern | timeline score: 14 | |
| Jan 2, 2021 at 11:47 | comment | added | Polygnome | @mti2935 You still have to trust 51% of the blockchain miners. And you still have to trust other people to accept the cryptocurrency. You can not live in a society with other people without trusting somebody, at some point. Otherwise, your only chance is to become a hermit. | |
| Jan 2, 2021 at 1:48 | comment | added | JohnP | This is why I avoid providing email or cell phone information to businesses. The only issue is should I not setup any online account, then someone else may, using my name. I actually don't have any cellular phone plan of any sort today, which seems to freak people out. As for email, I just say that I'm uncomfortable providing that information and they stop asking. If they insist, I give them no-reply@{my-domain} which many business email systems know to not use or so it seems. If we have a business relationship, they know my name and address, that's sufficient. | |
| Jan 2, 2021 at 1:27 | answer | added | Sherwood Botsford | timeline score: 2 | |
| Jan 1, 2021 at 23:28 | comment | added | mti2935 | @NotThatGuy +1, that's a good point. That's why Satoshi Nakamoto invented the blockchain. | |
| Jan 1, 2021 at 22:15 | comment | added | marcelm | @NotThatGuy Or, a bit closer to home: your domain registrar could steal your domain, and with it your website/email/etc. | |
| Jan 1, 2021 at 22:05 | comment | added | NotThatGuy | "So doesn't that give your email service provider basically full access to your accounts" - you mean like your bank can steal all your money? At some point you have to trust someone else with your stuff if you want to live in modern society. | |
| Jan 1, 2021 at 21:16 | history | became hot network question | |||
| Jan 1, 2021 at 20:45 | vote | accept | Teipekpohkl | ||
| Jan 1, 2021 at 20:12 | answer | added | Kate | timeline score: 2 | |
| Jan 1, 2021 at 15:26 | answer | added | gowenfawr | timeline score: 76 | |
| Jan 1, 2021 at 15:00 | history | tweeted | twitter.com/StackSecurity/status/1345021983034126342 | ||
| Jan 1, 2021 at 13:43 | comment | added | mti2935 | +1. In addition to the vulnerabilities that you describe, certificate authorities often use email verification to validate domain ownership when issuing SSL certificates. See docs.aws.amazon.com/acm/latest/userguide/…. So, a rogue email provider could easily get a fake CA-signed certificate for your site. | |
| Jan 1, 2021 at 13:27 | answer | added | Steffen Ullrich | timeline score: 27 | |
| Jan 1, 2021 at 13:25 | answer | added | AnFi onet.eu | timeline score: 6 | |
| Jan 1, 2021 at 13:16 | review | First posts | |||
| Jan 1, 2021 at 18:41 | |||||
| Jan 1, 2021 at 13:12 | history | asked | Teipekpohkl | CC BY-SA 4.0 |