This came up in https://github.com/solid/node-solid-server/pull/893#discussion_r230898095 Basically, the check in [/lib/requests/create-account-request.js#L134](https://github.com/solid/node-solid-server/blob/9b627e47ee191ea7b2a8f1710eb6a8a952e5557e/lib/requests/create-account-request.js#L134) could be extended by looking the email up in Troy Hunt's database. There are [packages to do this](https://www.npmjs.com/search?q=keywords:haveibeenpwned). Some measures were already taken in https://github.com/solid/node-solid-server/pull/859 it seems. If you would want to go fancy, you could look at [WebAuthn API](https://caniuse.com/#feat=webauthn) :-D
Activity
kjetilk commentedon Apr 1, 2019
We did this, didn't we?
Ryuno-Ki commentedon Apr 2, 2019
Can't tell. I'm currently not following along but only with the (plenty of) issues around solid :-(