As I understood in current notification system not possible to arrange email confirmation. So anonymous notifications may be used in malicious intent to compromise my site, which will send tonns of messages about new comments to innocent email. For example I don't like to spam bill_at_microsoft.com - if somebody entered this address when commenting articles at my site.
So I propose following:
- to allow email notifications for registered users
- for guests, each request for article comment notification, must be allowed after sending confirmation email with activation link, and if guest confirmed email by clicking this link. By the way, this system widely used in various components of news subscriptions via email.