Verify email account control in the browser

The Email Verification Protocol lets a website confirm that a user controls an email address — without sending a verification email. Chrome verifies a signed credential from the email issuer and populates a hidden form field; Assure validates that credential server-side and then applies its own policy: sensitive actions also require device possession and explicit user intent via a simulated Apple Messages for Business step-up.