On 9/5/22 15:13, Jaroslaw Rafa via mailop wrote:
Dnia 5.09.2022 o godz. 14:45:40 Michael Peddemors via mailop pisze:
This is the only argument that holds any kind of merit, but if you want to
REALLY see if the person intended to register, send them a real email, as in
confirmed double opt-in, that they have to click on.
Yes, please do exactly this. And in the confirmation email include the
IP address used to fill out the form as well as date, time, and
timezone. (And stop calling it "double opt-in")
Otherwise, I can use
your email in the web form.. it will validate as real, but I should not be
using it.
Indeed.
Of course, if you want that other person receive all information about
the progress and results of your application, and you have no access to
that information (unless you personally come to the office to ask about it),
then you can use someone else's email address ;). It will cause more
trouble to the person who filled the application than to anyone else.
You forget that there exist bad actors who fill out such forms in order
to harass people.
In the scenario I'm describing it was highly improbable that someone filling
in the form would provide all his/her personal data and other requested
information and give someone else's email address just for fun.
No, they'll typically provide someone else's personal data, other
information, and email address just for fun.
Similarly, you could theoretically use my email address when buying
something in an online shop. I haven't yet seen any online shop that
requires you to confirm your email address before sending you transaction
confirmations, information about delivery etc. They just take the address
you entered in the order form for granted. But would you do this?
One wouldn't, but there are pranksters and malicious actors out there.
This behavior far pre-dates email and web forms, by the way, but web
forms and email are just additional conduits for those who call in pizza
delivery, fill out "bill me later" magazine subscriptions, etc. in order
to annoy their victims.
Returning to "my" case, of course, it can happen that someone fills in the
application for another person, and provides all data of that other person,
but this is a completely valid case. You can do exactly the same with a
paper form. If you eg. fill in a tax form (on paper) for your friend or
family member - because he/she asked you to help with this - and provide
correctly all his/her data, is this any problem? People do this all the
time.
Indeed they do, and not always with good intentions.
--
Jay Hennigan - j...@west.net
Network Engineering - CCIE #7880
503 897-8550 - WB6RDV
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
