Live data from Hacker News

Check If Email Exists

github.com

31–40 of 260 posts

Re: Check If Email Exists

#31
Although many will criticise the level of perfection of this service, it could definitely be useful to many others. What is more, it is laudable that it's open source, and I guess that will lead to lots of community-driven improvements over time.

Re: Check If Email Exists

#32
If I were to self-host this (for instance to validate order emails and catch typos on a moderately visited e-commerce website, in the order of hundreds per day), what are the odds that I'll be banned by the major email providers (gmail, hotmail and co.) for abusing their servers?

Re: Check If Email Exists

#33

> Has this email been compromised in a data breach? Eep. My email is listed half a dozen times in Have I Been Pwned records, but I use different passwords for every site, so this means nothing.

Here, let me simplify that code:

  def has_user_been_pwned(email):
      return True
There. It's nearly impossible to be on the Internet at all without having some account or another be involved in an exploit at some point. You could rename the endpoint `user_had_a_facebook_or_twitter_or_linked_account_or_has_a_credit_score()`. This is a worthless thing to query because it tells you absolutely nothing about the owner of the address.

Re: Check If Email Exists

#34
post #20

Disclaimer: IANAL. This is a particularly interesting use of AGPL because it appears to contain a RESTful HTTP server built-in. To my knowledge, with the way AGPL works, there are some interesting wrinkles: - It is only intended to “trigger” when distribution occurs under some legal copyright law definition of “distribution.” - It allows commercial use of unmodified and modified instances of the licensed code, as lon…

Though if we follow this logic to its conclusion then using and distributing a program that cracks a trial version of software doesn't shouldn't be a copyright violation. That said I would be interested if anyone could clarify to what extent a copyright license has any legal power if you're not distributing anything.

Once again, not a lawyer, but... A crack or a keygen is in fact not illegal under traditional copyright law. That is illegal under the DMCA, at least in the U.S., as a tool meant to circumvent access control.

Ignoring whether the keygen/crack itself is illegal, redistributing it with a trial version could be. Aside copyright licenses, there’s sometimes clickwrap licenses that disallow you from redistributing the trial at all. On the other hand, I believe it is unclear if a copyright license itself (as opposed to a clickwrap agreement) can actually disallow distribution based on other things it is aggregated with. This isn’t a terribly big issue for AGPL and GPL because they explicitly limit their terms to not apply:

> A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an “aggregate” if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate.

Re: Check If Email Exists

#35
If you want to know the "how?" as I did - code is here, specifically https://github.com/reacherhq/check-if-email-exists/blob/mast...

tl;dr, According to RFC 5321, `RCPT TO` command succeeds with 250 and 251. So email is valid if you get to this part of the protocol and receive the response.

Re: Check If Email Exists

#37
Except if you try this with any real volume to most hosts, they’ll block you. These same techniques are used to dictionary attack as well.

Also, just because I have a catch all on my domain really shouldn’t be justification for saying my email isn’t valid and is a good way to lose business.

Re: Check If Email Exists

#38

Earlier quoted context omitted.

Would you mind sharing your experience on how well that has worked for you? Has the complexity of maintaining different addresses been a problem? I ask because it is something I have always thought about, but I suppose I kept hoping a service would come along and magic the solution for me. Kudos on making it happen!

I'm not OP but I do something similar, which I can describe. I don't whitelist addresses, I have a domain with a catchall account. So I make up addresses as needed. When I want them to die, I add them to a ruleset on the server that punts them into the bit bucket. So far it has been really great. Easy, effective. Edit: Like the other reply you got, I use FastMail for this service.

Dito, have been doing the same with a selfhosted mailcow for years. Never had a problem :-) Lately I started switching over to account+labels@domain.tld style because of the automated organization so I don't need extra routing rules if I want to organize them.

Re: Check If Email Exists

#39
post #21

I hope nobody uses this for anything serious. I run my own domain and use - @ to have a unique email for everything I sign up to. I have no email address that this counts as anything other than "risky". If this opts me out of marketing mail then that's probably a good thing, but I hope nobody puts a password-reset or security/billing notifications behind it.

I use @.

Re: Check If Email Exists

#40
post #21

I hope nobody uses this for anything serious. I run my own domain and use - @ to have a unique email for everything I sign up to. I have no email address that this counts as anything other than "risky". If this opts me out of marketing mail then that's probably a good thing, but I hope nobody puts a password-reset or security/billing notifications behind it.

Glad to see I'm not the only person who does that! Great way to catch those who share/sell your email and to set up filtering.
Post reply on HN