Chrome Intent to Prototype: Email Verification Protocol

https://groups.google.com/a/chromium.org/g/blink-dev/c/pWfWupaOtJw/m/MS6uaf_WAAAJ

by dfabulich • 11 months ago

2 2 11 months ago

groups.google.com

dfabulich• 11 months ago

The explainer goes into more detail about how it would work, if it ever ships: https://github.com/dickhardt/email-verification-protocol

The Email Verification Protocol enables a web application to obtain a verified email address without sending an email, and without the user leaving the web page they are on. To enable the functionality, the mail domain delegates email verification to an issuer that has authentication cookies for the user. When the user provides an email to the HTML form field, the browser calls the issuer passing authentication cookies, the issuer returns a token, which the browser verifies and updates and provides to the web application. The web application then verifies the token and has a verified email address for the user.
User privacy is enhanced as the issuer does not learn which web application is making the request as the request is mediated by the browser.

layer8• 11 months ago

That sounds like a way to create a moat for large email providers like Gmail.

Chrome Intent to Prototype: Email Verification Protocol

Related Stories