Live data from Hacker News

Check If Email Exists

github.com

81–90 of 260 posts

Re: Check If Email Exists

#81

Earlier quoted context omitted.

I have a .red and a .me and I have never not been able to sign up.

.life has four letters. Lots of terrible attempts to validate email addresses reject TLDs that aren't 2 or 3 characters.

>Lots of terrible attempts to validate email addresses reject TLDs that aren't 2 or 3 characters.

which is sad because .info has been around for 20 years.

Re: Check If Email Exists

#82
post #48
post #8

Could someone spell out a use case for this? One that comes to mind would be validating that a mailing list doesn't have any outdated email addresses in it, but couldn't that be determined by just checking for a bounce when a message is sent to it? I tried to sign up for SiriusXM the other day, and though I could create an account with my .pro email address, I couldn't actually sign up for service with that same addr…

The use case is marketing email. Sending to non-existent addresses can radically affect deliverability. If the address is to a large host, then they will use reaching invalid email addresses as evidence that you are not keeping to best practices. They will throttle deliverability, and possibly reject email. If your sending to an invalid host, then your mail sending provider (if your using one) may consider you a bad…

This is not for “marketing emails”. This is for spammers.

Re: Check If Email Exists

#83
post #82
post #48

Earlier quoted context omitted.

The use case is marketing email. Sending to non-existent addresses can radically affect deliverability. If the address is to a large host, then they will use reaching invalid email addresses as evidence that you are not keeping to best practices. They will throttle deliverability, and possibly reject email. If your sending to an invalid host, then your mail sending provider (if your using one) may consider you a bad…

This is not for “marketing emails”. This is for spammers.

They’re the same thing, really.

Re: Check If Email Exists

#84

Earlier quoted context omitted.

I just watched a video where someone demo’d GitHub Copilot by writing a comment along the lines of // IsValidEmail takes a string and returns whether it’s a valid email address The AI response was a nightmarish 100+ character regex that made my blood curdle. I think of email validation like encryption: don’t roll your own, and don’t trust an AI to do it either. Edit: Here's the regex: https://gist.github.com/cassidoo…

100+ is nothing. This is a regex that validates a string against the RFC822 "Standard for ARPA Internet Text Messages" and it contains 6424 characters. http://www.ex-parrot.com/~pdw/Mail-RFC822-Address.html

This is a Tony the Pony situation almost.

Re: Check If Email Exists

#85
post #38

Earlier quoted context omitted.

I'm not OP but I do something similar, which I can describe. I don't whitelist addresses, I have a domain with a catchall account. So I make up addresses as needed. When I want them to die, I add them to a ruleset on the server that punts them into the bit bucket. So far it has been really great. Easy, effective. Edit: Like the other reply you got, I use FastMail for this service.

Dito, have been doing the same with a selfhosted mailcow for years. Never had a problem :-) Lately I started switching over to account+labels@domain.tld style because of the automated organization so I don't need extra routing rules if I want to organize them.

Except for the sites that reject the + character in email. I curse those developers who do that and never go back to that site again.

Re: Check If Email Exists

#88
post #13

Earlier quoted context omitted.

That's what I would hypothesize as well. Inclusion in a leak by HIBP increases the confidence that it's a real address (but not the converse). Weighting is left as an exercise for the library consumer :)

It is a weird metric -- sure, inclusion in HIBP increases the chance that it is a real email, but it also drastically increases the chance that the person who's using the email address isn't the original owner. Signed, the twitch account that "I" created.

That would only be a problem if you didn't ultimately require email verification. At least to me, this seems like a tool to decide if you should send email verification or block the signup attempt, but I can see how some people might choose to use the information from this tool to allow verification-free account signup

Re: Check If Email Exists

#89
post #32

If I were to self-host this (for instance to validate order emails and catch typos on a moderately visited e-commerce website, in the order of hundreds per day), what are the odds that I'll be banned by the major email providers (gmail, hotmail and co.) for abusing their servers?

You'll get blocked by your hosting provider first. See a recent instance here: https://www.lowendtalk.com/discussion/comment/3237390/#Comme...

lol the guy in that thread is a real jackass

Re: Check If Email Exists

#90
post #70

Earlier quoted context omitted.

I did this for 3 years and did not find a single case of spammers using one of the emails. All spam was from the sites I signed up with. Email spam filters catch spam for you.

This isn’t just good against spam. If there’s a data breach on the site, it’s another layer of insulation against you and other accounts you own. It’s close to the equivalent of Apple allowing you to sign up to services using one of their anonymous emails — there’s clearly demand for people to want to keep their emails from being thrown around everywhere.

Wouldn't someone be able to reverse engineer the pattern? I assume everyone is doing some variation of so someone can try to figure out your other email addresses for other sites. Although I don't know if that's worth the time investment.
Post reply on HN