> wait a year or two, and check how much spam you get on those addresses Anecdote: I've been using a catch all email address on my own domain for about six mon

> wait a year or two, and check how much spam you get on those addresses Anecdote: I've been using a catch all email address on my own domain for about six months, and signed up for hundreds of services. So far, excluding aggressive marketing emails from the services I signed up for, I've gotten about five spam emails, and all of them were to random aliases on my domain that I've never used or shared like sales@yositosdomain but I am very curious to see how many spam emails I get to different aliases over time.