Steam just asked me "Is this still your email address? [email_address_here]"
This is an on-PC app that I trust, so I'm 100% confident of its legitimacy.
I would like to know about its usefulness. I get these kinds of requests periodically from dozens of apps or online services, and it's kind of a time-sink.
- Easy enough to click "Yup, still my email address", 1 second and done. Oh wait...
- They want to send a confirmation email to that email address.
- I have to fire up my email app, log in, find the email, copy the URL,
- Fire up the other browser I use for this and paste the URL,
- and then they want me to log in. Ugh. [Steam didn't, but many do.]
What is all this rigmarole really doing? Does it really help my security in any way? How does it help me for them to confirm an email that I know is good? I don't mind being a partner in security, but this seems utterly petty. Can you explain what good it actually does?
I'm only looking for InfoSec value. I couldn't care less about marketing value, engagement value or UX considerations (it's a given those aren't good).