search

decent-chat / decent

Open source messaging platform for the modern web
https://meta.decent.chat
GNU General Public License v3.0
21 stars 5 forks source link

Are email addresses made public by avatar URLs? #218

Closed towerofnix closed 6 years ago

towerofnix commented 6 years ago

There's no immediate way to simply view a user's email (outside of poking at the database, as the sysadmin), but is it possible to figure out what a user's email is based on their avatar URL?

This isn't necessarily a bad thing, but if it is possible, it should be visibly noted next to the email input in the account settings page.

bates64 commented 6 years ago

Avatar URLs are made by md5-hashing the user's email address. Pretty sure this is a non-issue.