It'd be good to implement asynchronous email verification where it's not immediately required to return a verified email. Of course, we don't want to go sending unverified emails to relying parties because they might not realise they're unverified and start sending actual emails to them.
It'd be good to implement asynchronous email verification where it's not immediately required to return a verified email. Of course, we don't want to go sending unverified emails to relying parties because they might not realise they're unverified and start sending actual emails to them.