TECH Signal 143
Test the Email Verification Protocol with an origin trial
This removes a common friction point in sign-up and authentication flows where users must leave the site to verify their email. For builders, it could reduce abandonment at conversion points, though adoption depends on email providers implementing the verification endpoint and users being signed into their email provider in the browser.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The protocol uses DNS records to discover the email issuer, which then provides an Email Verification Token (EVT) that the browser packages into a key-bound JWT with the site origin and a nonce for the verifier site to validate.
Users must be signed into their email provider on the same browser profile and select their email from autofill/autocomplete for the flow to work.
Verifier sites need to sign up for the origin trial and include a hidden field with a per-instance nonce on their email forms to participate.
THE CLUSTER