>some systems only enforce validation rules via client-side javascript Terrible! It's as good as no validation. Client side validation should simply save the c

>some systems only enforce validation rules via client-side javascript Terrible! It's as good as no validation. Client side validation should simply save the convenience of a wasted HTTPs request. Surely better to send known honeypot email addresses if looking to poison an email list.