On 6/26/25 10:49, Support 3Hound via mailop wrote:
Our customer is actually testing captainverify.com service (even if we
suggested not to trust these kind of services).
May it (or something similar) be a right/trustable way?
Absolutely not. It might for some degree of accuracy be able to tell if
an address exists. It will have zero reliability in determining that
said address belongs to the entity providing the address.
Let me quickly reply to the answers I got:
Yes, we are in EU and yes, I confirm that the "legal" situation is
clear; in detail:
Data owner: Big electrical company (nominate both our customer and us as
"External Data Processor")
We must follow their instruction present in the agreement: verify the
correctness of the data AND NOT contact the end user.
This is impossible. Anyone can put "[email protected]" or
"<anything>@mailinator.com" on a form. Both of those exist and are
deliverable, but neither will verify the correctness of the data or
associate the email address to an individual.
OK, the first one will, but it's doubtful that the individual will be
the one filling out your form.
Contacting a mail provider in order to verify the correctness of the
data is in the purpose of the agreement and of the data treatment so
it's not a violation.
Most mail providers won't be interested in assisting you in this. In
fact, most will be vehemently against it.
Contacting the end-user is a violation of both the agreement and privacy.
Then you need to revise your agreement to allow a single verification
email to actually be delivered, because your agreement as written simply
can't be done.
I never said we want to check in any "hidden/anonymous" way, I don't
know why someone figured it out
Then do it in an open, public way. If you want to confirm their email
address, send them an email. That's how it's done.
It should be a manual process, during the day contracts come to the
office and an employee manually insert data, she should click a specific
button in order to check, no batch process.
Even if VRFY or some other method worked, the only thing you've
accomplished is to show that the address put on the form exists. You
have absolutely zero assurance that the address is in any way related to
the person filling out the form.
--
Jay Hennigan - [email protected]
Network Engineering - CCIE #7880
503 897-8550 - WB6RDV
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
