Blocking disposable or temporary email addresses

[Yonas]

Hi,

Hope everyone is doing well!

What does the community think about adding a feature to Django where disposable or temporary emails are not accepted during account registration?

Best,
Yonas

[Dylan Reinhold]

You will never be able to define a "disposable or temporary" email address or provider, so it's a non-starter from my perspective. 

Dylan

--
You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-develop...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/c6101816-f267-4568-88d8-5b8f17bfd92en%40googlegroups.com.

[James Bennett]

On Wed, May 11, 2022 at 2:21 PM Yonas <ytila...@alumni.alueducation.com> wrote:

What does the community think about adding a feature to Django where disposable or temporary emails are not accepted during account registration?

I used to try to do this in my django-registration package, but eventually gave up on it because maintaining an up-to-date list of all possible domains and other patterns was not feasible. I expect the same would be true with Django — it would require frequent updates to the list of domains/patterns to block, and people would complain that the updates weren’t fast enough, because Django only releases once a month (and that’s assuming updates to the blocked email list would be considered for inclusion in the monthly bugfix releases, rather than only at feature release updates).

So I expect this isn’t something Django could or should do.

[Yonas]

Would syncing the block list from repos like https://github.com/disposable-email-domains/disposable-email-domains (actively maintained since 2014) ease the burden of updating the list?

[Tobias McNulty]

Hi Yonas,

Thanks for sharing this list. Even so, in my opinion, this feature lives best outside of Django where it can be appropriately customized as needed for a given project.

I hope this helps.

Best,

Tobias

--

You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-develop...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/b669801b-f695-49c2-9d04-2ff7db74dc58n%40googlegroups.com.

[Adam Johnson]

I would say this feature is a bit more questionable these days, since even big companies like Apple provide "disposable" email addresses for privacy protection.

And I also agree this would be better in a separate package, where updating the list of domains would be easier and not tied to Django's eight-monthly release cycle.

To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/CAMGFDKRONKrsAw35VBN8%3DYiNWkEzQWd5kUcYH1G8CjqG2eo%3DbQ%40mail.gmail.com.