On Fri, Nov 30, 2018 at 9:18 AM 殷啟聰 | Kai-Chung Yan <seamlikok@gmail.com> wrote: > However this worries me. During the setup there is no Debian involvement, and that means anyone can do the same trick to pretend to own my Debian address. There is a confirmation email so a Bad Guy would have to be able to read your email first. Thanks, Jeremy Bicha