>> Slightly off topic - Is it still a concern in 2017 that spammers will get hold of email addresses which are displayed publicly on the internet? Depends what

>> Slightly off topic - Is it still a concern in 2017 that spammers will get hold of email addresses which are displayed publicly on the internet? Depends what email provider you're using. But most modern email providers (Gmail, Yahoo, AOL) are so good at spam filtering it makes no difference. We run a high traffic website (1 million visitors / month +) and have posted Gmail-hosted addresses directly on webpages and had nothing hit the inbox but legitimate mail. >> Is it worth the effort to put stuff like this behind a form with captcha and all? Contact forms are still worth CAPTCHA'ing, because you will get bots that fill out these forms, and because the email is coming from your website's address, your email provider will not block it. We forgot to protect a contact form behind CAPTCHA recently, and the employee whose inbox it passed messages to drowned in SEO spam link emails until we fixed it, from bots filling out the form that thought they were filling out a website comments box.