View Single Post
Old 1 Oct 2021, 10:24 PM   #9
JeremyNicoll
Essential Contributor
 
Join Date: Dec 2017
Location: Scotland
Posts: 339
Quote:
Originally Posted by brong View Post
Turns out I was wrong, we did figure this one out. If you verify a wildcard alias we send to a random address in that wildcard and consider it verified if you get the code. So this workflow does work.
In the example I raised as a ticket [PTN 1471033], my wildcard alias was for

*@letterboxes.org

[For anyone else reading this, that's one of the FM-owned domains that anyone can use.]

I have a handful of registered specific letterboxes.org addresses. If you randomly pick an address @letterboxes.org you're extremely likely to spam someone who isn't me.

My suggestion that you don't offer a Verify button for such Identities has been given the "this is not on our roadmap" response, which I think is poor.
JeremyNicoll is offline   Reply With Quote