Live data from Hacker News

It's Impossible to Validate an Email Address

elliot.land

1–10 of 68 posts

Re: It's Impossible to Validate an Email Address

#3
> One more interesting tidbit is if you use unique sub-addresses for each of the sites you sign up to you will be able to see when someone, or rather who, sells your email to someone else... Busted!

Can't the spammers simply strip the subaddress/label after '+' ?

Re: It's Impossible to Validate an Email Address

#4
post #3

> One more interesting tidbit is if you use unique sub-addresses for each of the sites you sign up to you will be able to see when someone, or rather who, sells your email to someone else... Busted! Can't the spammers simply strip the subaddress/label after '+' ?

They can.

They don't.

It's extra effort for them for nearly zero marginal gain.

Re: It's Impossible to Validate an Email Address

#7
post #3

> One more interesting tidbit is if you use unique sub-addresses for each of the sites you sign up to you will be able to see when someone, or rather who, sells your email to someone else... Busted! Can't the spammers simply strip the subaddress/label after '+' ?

It doesn't have to be +. It can be any character you configure. Recent postfix versions even supports multiple characters.

Re: It's Impossible to Validate an Email Address

#8
post #5

Title on article would be more complete if said by Regex.

That's what the article describes, but it's hard to validate an email address by sending to it too if you want time bounds. My mail server implements greylisting and its frequently difficult for me to verify my email address on services that send me tokens that expire. Greylisting typically delays by only 10 minutes or so but there are plenty of times that mail servers can be down for extended periods, or a quota/disc is full, or an intermediate mail router is down, or any number of other problems

Re: It's Impossible to Validate an Email Address

#9
post #3

> One more interesting tidbit is if you use unique sub-addresses for each of the sites you sign up to you will be able to see when someone, or rather who, sells your email to someone else... Busted! Can't the spammers simply strip the subaddress/label after '+' ?

I went a step further and bought a .com that I setup with a catchall email forwarder. Most signups get a custom email at that domain. I still get Russian bride emails sent to oilchangeplace@
Post reply on HN