@MastodonEngineering@mastodon.social Here are some ideas: 1. Account creation should only be done by the instance not apps 2. Accounts cannot be created without confirming email first 3. Emails that are not on popular services (e.g. gmail, hotmail, yahoo etc) should prompt a difficult captcha to solve even before verification is sent