Live data from Hacker News

Email address validation: please stop

blog.sinjakli.co.uk

51–60 of 86 posts

Re: Email address validation: please stop

#51
post #3

On the other hand, maybe the specification for email addresses is too loose.

Too loose for what though? To make it more useful as a communication format or to make it easier for developers to validate it? It's hard to believe that a tighter spec could have improved the former.

Well for starters, why do you need to put comments in your email? That can't be used to make it more useful as a communications format.

Re: Email address validation: please stop

#52
post #46

Earlier quoted context omitted.

Exactly. You have no way of knowing what all the code along the way between the mail-sending application and your inbox does, that was my whole point.

But how can I be considered to be "asking for it" if I put a dot, hyphen or number in my email address, when millions of email addresses have them; the standard permits them; and many institutional policies create emails with them by default? Which characters can I have in my email address, that won't cause you to tell me it's my own fault when they get rejected? I agree that you have no way of knowing what all the c…

I am not sure whether relying on 'hope' is a good approach.

Re: Email address validation: please stop

#53

While I agree that some kinds of validation are 'too eager' and annoying, just use a 'legit' e-mail address, ffs. By including super-special characters and whatever extra features GMail or whoever provides, you're just asking for it, sorry. Especially if you're a coder yourself, you can already assume that even if it passes the initial validation, it probably won't be properly stored or escaped when the actual mail i…

The relevant RFCs make it clear what is a correct eMail address. Why should we have to put with lazy or incompetent coders who can't be bothered to meet the standard?

Because those RFCs are insane.

Seriously comments (nested even) in email addresses?

Re: Email address validation: please stop

#54
post #15

The "+" feature of gmail is great, but I hesitate to use it after some weird validation problems I've had. I've stopped asking that people validate properly, and started hoping that they a) don't validate or b) fail gracefully. One (very important) site properly validated my "+" email address on the front end (gave me no errors), but the backend failed and I never received the required confirmation email... all resul…

FYI this isn't a "feature of gmail". It's a feature of many, if not most mail systems (sendmail, postfix, qmail, etc.) and was around for many years before Google even existed.

Re: Email address validation: please stop

#55
post #38

I never understood the point of enforcing the spec for user input. Even if done properly it may reject some working, but invalid email addresses. And it does nothing to increase your chances of getting a good email address. Your user is either willing to give you their real address or not. If they are willing, validating fully does not protect against typos and if they are not you will get a well formattd fake addres…

Most forms I have seen validate this way - or at the most, check for x@x.x

Agree that anything beyond this may be a little overzealous- the real purpose and value of email validation is to help the form-filler discover typos/mistakes, to make sure you reach your willing customer. I can see though how some programmers would be tempted to distort this goal into the goal of having "a clean database." (Although worthy, but not the end goal)

Re: Email address validation: please stop

#56
post #33

While we're on the topic of emails, does anyone have any anecdotes or data on how often users will click activation links if I log them in after registration? I always hated having to log in to my email after signing up, so I just create an account and login users without any upfront verification. My email to the user says I will disable accounts that are not activated in 4 days, but its just a bluff :)

It may be annoying to have to go into your email to confirm, but as someone who has her first name @ gmail.com, I'm very thankful for it. I get people signing up for random crap with my e-mail all the time; without e-mail account confirmation, it means I start getting random e-mails someone else signed up for.

Or sometimes I get no e-mails at all. When I installed Rapportive (<3!) I found out that "I" had a profile on hi5, which I promptly deleted.

Re: Email address validation: please stop

#57
post #33

While we're on the topic of emails, does anyone have any anecdotes or data on how often users will click activation links if I log them in after registration? I always hated having to log in to my email after signing up, so I just create an account and login users without any upfront verification. My email to the user says I will disable accounts that are not activated in 4 days, but its just a bluff :)

I sometimes put my email down as foobar@example.com, so I’m definitely not going to click your activation links. That’s probably not representative of most users though.

Re: Email address validation: please stop

#58
post #14

There are two separate issues going on here. One: validating addresses to catch typos. A common example is typing a comma instead of a dot or typing just a username instead of a whole email address. Flagging these errors is a good thing. Two: some developers believe that they can make people enter real email addresses by being very clever about only accepting strings that look like real email addresses. This is stupi…

Re "Two", if you choose an email address that doesn't look like an email address and it gets blocked then I'm not sure that it is the developer [alone] who is being stupid.

I'm not talking about escaped @ symbols here (that's bonkers). There is still plenty of code out there that assumes a domain suffix is only ever 2 or 3 letters long and that usernames are only letters and numbers.

Re: Email address validation: please stop

#59
post #33

While we're on the topic of emails, does anyone have any anecdotes or data on how often users will click activation links if I log them in after registration? I always hated having to log in to my email after signing up, so I just create an account and login users without any upfront verification. My email to the user says I will disable accounts that are not activated in 4 days, but its just a bluff :)

I sometimes put my email down as foobar@example.com, so I’m definitely not going to click your activation links. That’s probably not representative of most users though.

You'd be surprised how many people supply bogus email addresses for something they ostensibly actually would like emailed. Like the To field on "tell a friend" or the signup box for an email newsletter.

Re: Email address validation: please stop

#60
This is truly annoying and makes me hesitate to use the '+' feature. The problem I've had is when I get manually subscribed to an email list (like when giving my email on paper or being added after sending a senator an email) and then cannot unsubscribe due to validation failures.
Post reply on HN