We have a signup flow, we also have login via Google.
The signup flow asks for a password, but if you have an email address managed by gmail, there is no need to pester you to come up with a separate password, when you can just login via Google’s OpenID/OAuth2
So I am wondering if there is any quick and easy checks on the email address that allow confirmation that the address is managed by GMail.
It is ok to give false negatives, false positives are completely unacceptable.
Obviously, the “is it @gmail.com” test is a valid one, but I would like something with a lower rate of false negatives.
My next thought is to check the MX records in DNS and see if that is the Google Mail MX record… But is that proof that the account is managed by google?
Or are there any other tests people have?
Query for the SMTP server, open a connection to the SMTP server, start sending the email and if you don’t get a 550 (user does not exist) then cancel the SMTP session and exit.
Hope this helps!