this post was submitted on 26 Aug 2026
9 points (100.0% liked)

Web Development

5796 readers
25 users here now

Welcome to the web development community! This is a place to post, discuss, get help about, etc. anything related to web development

What is web development?

Web development is the process of creating websites or web applications

Rules/Guidelines

Related Communities

Wormhole

Some webdev blogsNot sure what to post in here? Want some web development related things to read?

Heres a couple blogs that have web development related content

CreditsIcon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS
snowe@programming.dev
erlingur@programming.dev
Ategon@programming.dev
Vacant@programming.dev
9
Have you seen the new browser Email Verification API? (resend.com)
submitted 4 days ago by sanitation@lemmy.today to c/webdev@programming.dev
9 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] FizzyOrange@programming.dev 1 points 21 hours ago (1 children)

Once the browser has discovered the issuer and knows that the user is logged in to the issuer, it is pretty confident that can provide an EVT, so it can choose to ask the user for permission. Each browser implementation is responsible for making their own judgement based on their user’s expectations, so this specification isn’t opinionated about how the interface with the user materializes.

Google has likely chosen to make the permission prompt a one-time thing, which seems fine to me.

However, at that point, the website can in fact check if you’re logged in to a specific email address automatically.

It cannot.

[–] Opisek@piefed.blahaj.zone 1 points 20 hours ago* (last edited 20 hours ago)

It cannot.

I don't understand where your confidence is coming from, but I'd like to refer you to the proposal:

https://github.com/WICG/email-verification

3.1: The email selection is done through an <input> element. Populating this can be done programmatically.

3.3: The verification consent is out of scope of the proposal, so it can indeed be completely missing.

If you still disagree, then I frankly don't care. The mechanism behind this automatic verification is black-and-white and I've already outlined how it can and most likely will be abused by huge corporations.

Edit: Well would you take a look at that; I'm not the only person seeing this issue: https://github.com/WICG/email-verification/issues/51