Please allow the users choose which email address can be used to log in, so only the primary address and/or selected aliases work. As currently every alias can sign in is a major security risk because leaked or exposed aliases widen the attack surface. Most of us use aliases only for communication, we dont need that to be used for log in.
Please allow the users choose which email address can be used to log in, so only the primary address and/or selected aliases work. As currently every alias can sign in is a major security risk because leaked or exposed aliases widen the attack surface. Most of us use aliases only for communication, we dont need that to be used for log in.