2017-12-11 17:19 GMT+01:00 Chris Jerdonek <chris.jerdo...@gmail.com>: > Why do you say this? Can't this only be true for accounts that allow > password recovery / reset via email? > > --Chris
While I didn't check, but I'm quite sure that the email quickly enters into the play when you want to recover your GitHub account when you lost everything (password, 2FA key, recovery code). At least, the email was the key to break the security in one "I have been hacked" article. Hum, I think that it was this article: https://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/ The story is related to "password reset": Google (Gmail), Apple, Twitter, Amazon, etc. Victor _______________________________________________ python-committers mailing list python-committers@python.org https://mail.python.org/mailman/listinfo/python-committers Code of Conduct: https://www.python.org/psf/codeofconduct/