Comment by tantalic

I am a bit surprised the proposal doesn't suggest using a hash (such as SHA-2) rather than directly passing the email address.