Hacker News Reader

I don't think they take security any less seriously than most social networks. If you're worried the sending/receiving servers have access to the email address, then it seems you would have to be equally concerned account recovery via email considering most email is not encrypted.

View on HN

The target email address basically includes a secret that allows you to post by sending an email to it. It's not the same thing as clicking on an email you receive to reset a password. I can't reset your password just by knowing the email address associated with your Facebook account. I'd have to intercept the password reset email.

Reply on news.ycombinator.com