Hacker News Reader

I havent followed too closely the state of secure email delivery, but I would guess that even today a huge percentage of people both send and receive email in clear text over easily intercepted links.

this option only makes sense if email delivery can be guaranteed to be secure, and the recipient has non-password-based (two factor) auth.

View on HN

Well, currently almost all password resets work over email. If you can read my email, you can reset all passwords for my bank accounts, shopping site accounts, etc. this solution is no worse than others.

Yes, this is why I wish we could disable password reset emails as an option. I seem to remember disabling that in gmail when I activated two-factor...

Reply on news.ycombinator.com