Comment by jddj

Typically the email domain of a user is enough for those sorts of claims.

It probably shouldn't be, especially for university domains. But here we are.