GoDaddy Released My Personal Information to a Spammer Troll
While GoDaddy has a point about the opt-in component being important for deciding whether spamming took place, they certainly didn't need to release her personal information to the spammer. That's a terrible, serious breach of privacy.A naive approach that might work without either party needing to divulge emails:GoDaddy: "We have received complaints that you've been spamming. Give us a list of SHA-1 hashes of addresses of the people that opted in and show us how they opted in."Customer: "Here's the list."GoDaddy: "At least one complaint email we received does not match the SHA-1s on this list."