4 ms·

That's not going to help, since everybody knows you can just strip everything after the '+' and get to the main mailbox.

Already__Taken 6y ago
Jokes on them, if my spam+<tag> doesn't have a tag it's straight in the bin.
- lucb1e 6y ago
  It's always a cat and mouse game, user+$RANDOM@example.org would still get through and you'd not be able to block that based on the sender (assuming you do it like most people, blacklist-based, rather than allocating new email addresses when you need them). Of course, this only becomes an issue when the masses start doing it. I'm very surprised how few spammers remove tge +tag, given that that's semi-mainstream by now.
  - em-bee 6y ago
    you could track your +labels and reject any unknown ones. personally i don't worry about spam, i want to track who leaks their users email addresses, and then be able to filter on labels that have gone bad
hawski 6y ago
I do prefix+12RandomLetters@blahblah and every potential sender gets it's own random address. Then I use filters to move mail to predefined folders. What's left is spam. If a mail comes in from an unknown sender to known address I know that the address is compromised. Ideally I would like to plug my password manager to generate an address and automatically add email filters in place. Although I was thinking about a service that would just give randomalphanumeric@example.com for all its users, so they would be on the same host and no connection between addresses could be implied. It could or even should be receive only.
- beagle3 6y ago
  Do you ever need to give someone an address on the phone? I do. If you do, how well does your 12 random letter system work for that use case?
  - hawski 6y ago
    I use it only for services. If I have an actual person I give them my other (normal) e-mail.
kevin_thibedeau 6y ago
'+' has no standardized meaning. Just put the tag first and let them strip off the unimportant part.
- beagle3 6y ago
  That's easy if you run your own mail server, but how do you apply that to your Gmail, Gsuite, Outlook, Fastmail or Yahoo mail account?

Already__Taken 6y ago

Jokes on them, if my spam+<tag> doesn't have a tag it's straight in the bin.

lucb1e 6y ago
It's always a cat and mouse game, user+$RANDOM@example.org would still get through and you'd not be able to block that based on the sender (assuming you do it like most people, blacklist-based, rather than allocating new email addresses when you need them). Of course, this only becomes an issue when the masses start doing it. I'm very surprised how few spammers remove tge +tag, given that that's semi-mainstream by now.
- em-bee 6y ago
  you could track your +labels and reject any unknown ones. personally i don't worry about spam, i want to track who leaks their users email addresses, and then be able to filter on labels that have gone bad

hawski 6y ago

I do prefix+12RandomLetters@blahblah and every potential sender gets it's own random address. Then I use filters to move mail to predefined folders. What's left is spam. If a mail comes in from an unknown sender to known address I know that the address is compromised. Ideally I would like to plug my password manager to generate an address and automatically add email filters in place. Although I was thinking about a service that would just give randomalphanumeric@example.com for all its users, so they would be on the same host and no connection between addresses could be implied. It could or even should be receive only.

beagle3 6y ago
Do you ever need to give someone an address on the phone? I do. If you do, how well does your 12 random letter system work for that use case?
- hawski 6y ago
  I use it only for services. If I have an actual person I give them my other (normal) e-mail.

kevin_thibedeau 6y ago

'+' has no standardized meaning. Just put the tag first and let them strip off the unimportant part.

beagle3 6y ago
That's easy if you run your own mail server, but how do you apply that to your Gmail, Gsuite, Outlook, Fastmail or Yahoo mail account?