I'm pretty sure that email obfuscation schemes such as you are using don't fool modern email harvesting 'bots. In fact, I know they don't, because there are 'b

I'm pretty sure that email obfuscation schemes such as you are using don't fool modern email harvesting 'bots. In fact, I know they don't, because there are 'bots out there that find text strings in proximity to an "@" sign and then try that text as the username against the domain that they've seen. I know that happens, because I've laid honeypots and seen it. So your method is not proof against being harvested by 'bots, and if it hasn't yet, it's because those 'bots haven't scanned your profile. Yet. This is no doubt then bolstered by having humans doing grunt work -- we know that happens too. With regards real humans having problems, there's no reliable way to estimate the rate, but I run an event every year, and every year there are a handful of people who can't cope with an address that requires anything more than just clicking on a link. I'm guessing around 5 to 10 out of 200 to 300. I use primarily plain email addresses, and then strengthen my filtering to make sure the 'bots don't get through. Mostly. That's the failure mode I've chosen. You could decide that if someone isn't "smart enough" to decode your obfuscated address then you don't want to hear from them. That's a choice. The important thing is to know you're making it, and to evaluate the consequences.