Yeah I get it, just disagree that it circumvents anything. If emails actually worked this way then leaking the domain would be effectively the same as leaking a

Yeah I get it, just disagree that it circumvents anything. If emails actually worked this way then leaking the domain would be effectively the same as leaking an email is today. The + scheme doesn’t work because of the aforementioned normalization, and this domain thing wouldn’t work for the exact same reason - whoever had the leaked email could just send an email to <anything-they-want>@<yourdomain> and it’s all the same