search

mozilla / persona-yahoo-bridge

A ProxyIdP service for bridging major IdPs who lack support for the BrowserID protocol.
26 stars 15 forks source link

[hotmail] enumerate where someone@hotmail.com is also someone@hotmail-by-a-different-name.tld #176

Open jrgm opened 11 years ago

jrgm commented 11 years ago

Similar to #175, but I haven't researched and don't have an example. But

If I have and address someone@hotmail.com and send email to someone@hotmail-by-another-name.tld are those the same account (windowslive?). We need to figure out how we recognize this. This may well be a duplicate listed elsewhere.

chemistrydioxide commented 11 years ago

I can confirm that someone@msn.com, someone@live.com, someone@hotmail.com and someone@outlook.com are four different users.

However, I don't know if the same is true if the domain names (appear to) belong to the same email service (i.e. hotmail.de and hotmail.com) although I think that unlike Yahoo, AOL or Google, Microsoft will never treat two different domains as the same namespace.

This is related to #133 where I suggested that BigTent should work with all Hotmail/Windows Live domains that it could work with.