Hacker News Reader

We had a discussion at LeT, where privacy focussed email provider (Aster Mail) used client side validation for restricted email address, and a user bypassed to create restricted email address Did you moved all such things from Client side to server side? or are you using the same client side validations?

View on HN

Yes, we did see the thread shortly after it was posted, and we did move the restricted email address validation to the server side. The client-side check is still there in the UX layer, but it is no longer the security boundary. Thank you for bringing it up here.

cool, just asked when i saw the post.

Reply on news.ycombinator.com