What is your email used for when signing up to Lemmy? Is it just for password reset?

  • Ada
    link
    fedilink
    English
    2210 months ago

    We use it as an (imperfect) speed bump for spammers. Also for password resets. That’s about it.

  • Otter
    link
    fedilink
    English
    910 months ago

    I assume it can be seen by admins?

    I trust my admins, but I still used a forwarding service because there’s always a risk of an attack exposing data. Unless there’s some other security there I don’t know about

    • BlueÆther
      link
      fedilink
      English
      710 months ago

      Yes us instance admin can pull the email address form local users.

      • Otter
        link
        fedilink
        English
        410 months ago

        Can you pull for foreign users? Curious what other federated instances can see

        • BlueÆther
          link
          fedilink
          English
          710 months ago

          select person.id,name,local,local_user.email from person join local_user on person.id = local_user.person_id where person.id =2;

          id | name | local | email

          ----+-----------+-------+---------------------

          2 | BlueEther | t | firstname@lastname.nz

          Email is only available for local users and only if filled in on the signup form

    • Meldrik
      link
      fedilink
      English
      210 months ago

      There’s no interface for it, but the emails can be extracted from the database, no doubt.

  • ronalicious
    link
    English
    110 months ago

    I use my irl Gmail for pretty much everything at this point. I just don’t give a f anymore. I do have a domain I keep in my back pocket just in case. but IMHO if the man cares enough to know about me , the man is gonna know

    • Otter
      link
      fedilink
      English
      3
      edit-2
      10 months ago

      For me that’s the case for most things.

      For Lemmy, especially as more communities pop up and I make alts, I’d want to keep things private. I don’t want my personal email address tied to comments exploring topics personal to me, or even my friends/family. I won’t ask about a problem a close friend is having unless I can guarantee I’m not outing information they don’t want public.

      If any admin can see the email, that opens up the risk of an admin being malicious or incompetent with how the data is secured. This is a problem with any service, but one to keep in mind for federated stuff.

      Obviously with accounts where I use my name, I’d prefer of my email was hidden but I don’t care as much if it gets dumped.