6 ms·
Just a nitpick: Gmail doesn't allow consecutive periods, so X..@gmail.com doesn't work. You can do a.bc, a.b.c, ab.c etc. instead.
by Asraelite 4y ago
Just a nitpick: Gmail doesn't allow consecutive periods, so X..@gmail.com doesn't work. You can do a.bc, a.b.c, ab.c etc. instead.
- tsimionescu 4y agoOops, you're right. Did they also support user+somestring@gmail.com to be equal to user@gmail.com as well?
- Asraelite 4y agoYeah, they support +something. Sadly lot of websites don't accept it as a valid email address because of the +.
- imglorp 4y agoI wonder if that's because they know people use + to tag for later spam blocking, or is it just a lazy regex user who needs to read this article?
- skeeter2020 4y agoIME it's the latter, but not because they are lazy, but because email validation is hard. The lazy regex was in the late 90's early 00's when any email that didn't end in .com, .edu or .net failed!
- hoosieree 4y agoThe problem is insufficient laziness. Just check that the email contains an `@` sign, and validate later by corresponding with the address. if "@" in email: send_confirmation(email)
- shakna 4y agoWhich is truly terrible. I mean, here's a valid email that was used in the early 90s: sdchema!mhtsa!australia!chris@Nosc
- jonathanlydall 4y agoOur website blocked it inadvertently, we were using ASP.NET Identity which has internal email validation which by default does not accept it. Just flipping a flag in the configuration is enough to allow it, but until someone reported the problem I wasn’t even aware it was blocked.
- mgkimsal 4y agoFound a mailing list ("marketing") service that allowed you to sign up with a +, but any 'unsubscribe' was a link to a URL with your email in it, with the + sign in it, and... the unsubscribe page could magically never find your address to unsubscribe you. I submitted this as a bug report to the service, and was brushed aside. At that time, I also had a couple friends who worked there, and tried to run it up the flagpole there, and I was told about half the folks there didn't understand the problem, and the other half didn't really care, because the + trick was seen as very niche. So I started reporting all the newsletters I got as 'spam' - well after I'd tried to unsubscribe.
- NLPlatypus 4y agoYou could sign them up using many + emails
- account42 4y agoDid you try to replace the + in the unsubscribe URL with %2B (the urlencoding of a +)? Because interpreting the URL on the server will almost certainly mean urldecoding the arguments which will turn + into a space.
- monkpit 4y agoDoesn’t the browser do this for you?
- djbusby 4y agoNope, cause + used to mean space. So plus symbol has sometimes to be left alone, some times replaced - due to still supporting legacy stuff and the newer RFC that makes + go away.
- mgkimsal 4y agoFWIR, yes. And it didn't work. They had some weird parsing going on to deal with some weird legacy stuff from years earlier, and... it made life more complicated than it needed to be.
- 4y ago
- hoosieree 4y agoI just wrote a post[1] about using the user+alias@example.com instead of user@example.com. Basically treat your "regular" email address as a spam target, and use user+alias for all wanted communications. The +alias can be a random string, making it harder for spammers to guess. This works in gmail for both sending and receiving, although sending as you+alias@gmail.com requires messing around in the settings[2] and having to remember to select a non-default From: address in your outgoing mail. [1]: https://alexshroyer.com/posts/2022-09-01-Default-Honeypot.html https://alexshroyer.com/posts/2022-09-01-Default-Honeypot.ht... [2]: https://webapps.stackexchange.com/questions/3598/is-there-any-way-to-send-an-email-from-a-gmail-plus-address/3603#3603 https://webapps.stackexchange.com/questions/3598/is-there-an...
- Navarr 4y agoIf this gained widespread adoption, then spam would just +string and you'd have to allow-list. Allow-list isn't the worst, but this isn't a long-term solution in and of itself
- hoosieree 4y agoTrue, but the nice thing is it that allow-lists can be handled transparently by your email client. Never saw this +string before? Mark as spam. Is the +string missing? Spam. Recognize this +string from your "Sent" folder? Keep. Signing up for something? Generate a pseudorandom +string and add it to the allow-list.
- Avamander 4y agoActually RFC 5322 says that you can't have two consecutive periods.