Live data from Hacker News

Microsoft adding support for custom '+' email addresses in Office 365

zdnet.com

71–80 of 129 posts

Re: Microsoft adding support for custom '+' email addresses in Office 365

#72
post #51

Earlier quoted context omitted.

Jokes on them, if my spam+ doesn't have a tag it's straight in the bin.

It's always a cat and mouse game, user+$RANDOM@example.org would still get through and you'd not be able to block that based on the sender (assuming you do it like most people, blacklist-based, rather than allocating new email addresses when you need them). Of course, this only becomes an issue when the masses start doing it. I'm very surprised how few spammers remove tge +tag, given that that's semi-mainstream by no…

you could track your +labels and reject any unknown ones.

personally i don't worry about spam, i want to track who leaks their users email addresses, and then be able to filter on labels that have gone bad

Re: Microsoft adding support for custom '+' email addresses in Office 365

#73
post #17

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

That's not going to help, since everybody knows you can just strip everything after the '+' and get to the main mailbox.

'+' has no standardized meaning. Just put the tag first and let them strip off the unimportant part.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#74
post #34

Earlier quoted context omitted.

I've long held the thought of having a mailbox that receives [everything]@[domain], except certain blacklisted addresses. As certain addresses get spam and/or I lose interest in the business I gave the address to, I add them to the blacklist. So far, I'm using AWS SES, which seems to be focused on the sending of marketing emails, and are not fussed on receiving, but includes rudimentary blacklisting. So far, it's zer…

How is it set up with SES? AFAIK they don't provide a POP/IMAP interface.

I presume the parent means Amazon work mail which AFAIR uses SES to send. Last time I evaluated email services, they didn’t handle catch-all which made that a non-starter for us.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#75
I think if you have the means, you should always get a custom domain for your email address. Your email address is the key to your online identity. You should own it, and not lease it from someone else.

And it is not like you have to manage your own email servers. You can use services like fastmail or any number of email providers to receive email on your own domain. You also have the ability to change your implementation without changing your address. You can decide to host it yourself, or go to another provider without having to tell all your contacts that you are changing your email.

It becomes trivial to actually give out email addresses that are customized for the service. Instead of me+service@hotmail.com you can give out service@mydomain.com.

In my opinion, the money you spend for your own domain for email, is well worth it.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#76
post #64

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

The other problem I ran into is spam+sitename@mydomain.com is really awkward to read over the phone. I ended up switching to sitename@email.mydomain.com, which passes all validators and doesn't sound as sketchy. Using a subdomain, I don't seem to catch any of the spam that gets targeted to catchall domain addresses. Also, I once encountered a site where spam+xyz worked for signup but failed validation on the login fo…

The worst is when it doesn't fail signup, but URL-Decodes into a space in their data.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#77

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

I use shopname@firstname.lastname.email, with my own lastname.email domain. Fastmail makes configuring your dns records for this super simple. It's always fun interacting with customer service reps when they for example confirm my email address... "errrrrr yeah so we email you at ourname@...?"

I own fakefakefake.email and savor the opportunity to give people dumb catchalls when they insist on needing an email address from me.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#78

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

I use qmail, where - has been the extension for, well, since it was created. If you're a postfix person, you can use + or -, with recipient_delimiter.

You're less likely to bump into issues with -.

Some shops don't like their trade name in the email, so rot13 (g? in vim) solves that if your goal is to trace back the leaks. I have not found a reliable way of auto dropping mail from bad sources, sometimes companies change name which makes it hard to validate From with recipient.

Re: Microsoft adding support for custom '+' email addresses in Office 365

#79

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

I use shopname@firstname.lastname.email, with my own lastname.email domain. Fastmail makes configuring your dns records for this super simple. It's always fun interacting with customer service reps when they for example confirm my email address... "errrrrr yeah so we email you at ourname@...?"

Wow I have the exact same setup – it works perfectly! I assume you also, like me, have a backup domain like lastname-email.com for all the broken email validators out there?

Re: Microsoft adding support for custom '+' email addresses in Office 365

#80
post #39

Now if only websites will stop rejecting plus-addressed email addresses as invalid. The most frequent offenders are mom & pop websites that you just _know_ are going to get breached.

You can also use this with a "." (email.spam@gmail.com) in Gmail.

It is indeed a good way to filter out _all_ email...
Post reply on HN