You might want to add SSL (through Lets Encrypt) to give the user any trust. I am not uploading a list of email addresses of other people when they can he hijacked.