when a user want to change his account email address, should i send verification link to his old email account?
I should beacuse worry hacker change her email address after success hacked.
I should not because the reason he want to change is email address is because he cannot login his old email account.
Any solution for this conflict? Should or should not?
It is reasonable question but in this situation you can sent Verification link to New account and Sent the information about changing email address to the old account.