Chrome's EVP proves a live session, not real intent: DOI survives
Chrome's Email Verification Protocol only proves a live session with the mailbox provider, and only when the address comes from autocomplete in a signed-in profile. Manual entry, a different provider, or no session: no token, so the form falls back to classic confirmation. A 12-scenario grid shows EVP covers a narrow slice of signups. Double opt-in's death is premature; EVP is a friction killer, not a deliverability guarantee.