It is possible to log in with my Yahoo OpenID (which is tied to my Yahoo e-mail account), and then create a new unregistered user with the same e-mail address, so that both accounts are connected to the same e-mail. Why is that allowed? Shouldn't Stack Overflow have some sort of e-mail confirmation?
What is meta?
- Any Stack Exchange user can ask a question
- The community provides support, votes on ideas, and reports bugs
- Your voice helps shape the way Stack Exchange operates
Your e-mail isn't the key to your account. Your OpenID endpoint name is the key, and those are unique for your accounts. The e-mail address is irrelevant, and does not need to be confirmed, because it was confirmed separately by your openID provider.