Live data from Hacker News

Stop Validating Email Addresses with Regex (2012)

davidcel.is

71–80 of 228 posts

Re: Stop Validating Email Addresses with Regex (2012)

#73
post #68

Earlier quoted context omitted.

What's wrong with a username and password?

Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login. Not to mention that nowadays most services ask some second and third factors like email which has 2 passwds, phone which may be lost, docs which may be unwanted to demonstrate. Modern cryptography may solve it if webmasters really want it (but for some reason they prefer to collect as much as possible).

> Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login.

All solved by a password manager.

Re: Stop Validating Email Addresses with Regex (2012)

#74
I wish validating emails through sending was more common. I have early days Gmail account based on a name. For some reason there are many people out there who put my email on their accounts. Great when I got free Disney+ for a few months because someone signed up with my email. Less fun when ovia health won't stop sending me fertility tracking information about a stranger because they put my email down and ovia didn't think it important to validate.

Re: Stop Validating Email Addresses with Regex (2012)

#75

You actually should at least use regex to check some basic things. Like "@" "." or even just disallowed characters. As someone who sends a LOT of email for customers every week, a big percentage of our problem is incorrectly formatted emails. So we just don't even let them in these days. People are forgetting that for services that have to send email it costs dearly to bounce. Bounces decrease the quality of your lis…

I think the case you are really making is for using the string validation (regex) to knock out clear or even obvious mistakes, as opposed to using a regex that everyone has to pass to proceed.

Yes.

Re: Stop Validating Email Addresses with Regex (2012)

#76
post #68

Earlier quoted context omitted.

Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login. Not to mention that nowadays most services ask some second and third factors like email which has 2 passwds, phone which may be lost, docs which may be unwanted to demonstrate. Modern cryptography may solve it if webmasters really want it (but for some reason they prefer to collect as much as possible).

> Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login. All solved by a password manager.

And being bond to some database? That is... not for everyone.

Password manager is good if it is planned to share all my passwords after my death with my family, for not gifting my funds to some random guys. In every other cases it sucks like Sasha Grey (from my lifestyle's point of view which involves heavy use of random devices most of them even does not support any passwd mngr).

Re: Stop Validating Email Addresses with Regex (2012)

#77
post #68

Earlier quoted context omitted.

What's wrong with a username and password?

Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login. Not to mention that nowadays most services ask some second and third factors like email which has 2 passwds, phone which may be lost, docs which may be unwanted to demonstrate. Modern cryptography may solve it if webmasters really want it (but for some reason they prefer to collect as much as possible).

These all sound like convenience factors. I don't see why my identity with one provider has to be tied with my identity from another provider at all. Having a crypto wallet (for this purpose) is just certificates with extra steps (quite literally, as it's cryptography).

Re: Stop Validating Email Addresses with Regex (2012)

#78
post #76

Earlier quoted context omitted.

> Easy to forget login, easy to forget passwd, easy to forget what passwd is attached to some login. All solved by a password manager.

And being bond to some database? That is... not for everyone. Password manager is good if it is planned to share all my passwords after my death with my family, for not gifting my funds to some random guys. In every other cases it sucks like Sasha Grey (from my lifestyle's point of view which involves heavy use of random devices most of them even does not support any passwd mngr).

> In every other cases it sucks

It doesn't for basically everything I do, and I have a lot of systems, subscriptions, and profiles to worry about.

> random devices most of them even does not support any passwd mngr

In the simplest case, 2 things are needed to support a password manager: Network access, and copy-paste.

Re: Stop Validating Email Addresses with Regex (2012)

#80
post #76

Earlier quoted context omitted.

And being bond to some database? That is... not for everyone. Password manager is good if it is planned to share all my passwords after my death with my family, for not gifting my funds to some random guys. In every other cases it sucks like Sasha Grey (from my lifestyle's point of view which involves heavy use of random devices most of them even does not support any passwd mngr).

> In every other cases it sucks It doesn't for basically everything I do, and I have a lot of systems, subscriptions, and profiles to worry about. > random devices most of them even does not support any passwd mngr In the simplest case, 2 things are needed to support a password manager: Network access, and copy-paste.

> In the simplest case, 2 things are needed to support a password manager: Network access, and copy-paste.

All of my mobile devices doesn't really support JS so I can not even input my HN's password to there without a PC.

Also I do not believe all of my e-mails which has some accounts with some values on it are still working. At least one time I had to re-register e-mail exactly as previous to withdraw some of my funds which were untouchable for few years :-) So the biggest part of problem is not on user's sides of wire and I have already tired to struggle to formulate such a simple thing using such a lot of sentences.

Post reply on HN