Re^2: Email security for monks?

[CountZero]

Which "old" address? The original one (which might be invalid now) or simply the previous one? If you go for the last option: what stops an intruder from changing your e-mail address twice, so he still gets the confirmation mail and he can prove he is the "real" you?

[Golo]

what stops an intruder from changing your e-mail address twice (...)

Nothing, but you would still receive the notification for the first change. If the old (previous or original) address is invalid, the mail gets bounced - bad luck (or doesn't matter in the more likely case you wanted to change the address because of that).

I know it's a weak proof, thats why I put it in quotes, but I think the notification might be a good feature.

[CountZero]

I see, it is just like some "alarm": at least you know you are being burgled.