Currently, a user account in an email_confirm state is permitted to send as many confirmation emails as they can be bothered to generate. Even if the receiving email system is rejecting them.
Email bounce handling should be applied so if they are detected as bounced, the account moves to a state where they are not permitted to send confirmation emails and must enter a new email address.
This likely applies to the email_confirm_edit state as well.
This is desirable as I've not-uncommonly had users signup with an unacceptable email (ie miss-spelt domain) and they've spammed away trying to get a confirmation email despite thier email address being completely invalid.
Email bounce handling should be applied so if they are detected as bounced, the account moves to a state where they are not permitted to send confirmation emails and must enter a new email address.
This likely applies to the email_confirm_edit state as well.
This is desirable as I've not-uncommonly had users signup with an unacceptable email (ie miss-spelt domain) and they've spammed away trying to get a confirmation email despite thier email address being completely invalid.
Upvote
10
