3 ms·

It’s amazing how many login forms are labeled “email” and then don’t have the correct type set.

_heimdall 2y ago
This is particularly annoying on mobile since on-screen keyboards won't adjust to an email input layout and autocorrect will screw up basically any email address as soon as a "." character triggers autocomplete to commit it's guess.
- icar 2y ago
  And password managers will not fill in the credentials correctly.
  - Sander_Marechal 2y ago
    Get a better password manager? I use Bitwarden and it has never failed to fill out the login forms for me.
    - crabmusket 2y ago
      Bitwarden has failed me on some sites.
crabmusket 2y ago
I think that in some cases this could be because the inputs accept usernames as well as emails. But not in all cases, which is annoying!
account42 2y ago
From https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/email#validation https://developer.mozilla.org/en-US/docs/Web/HTML/Element/in... > Browsers automatically provide validation to ensure that only text that matches the standard format for Internet email addresses is entered into the input box. Browsers use an algorithm equivalent to the following regular expression: > /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/; Which doesn't even allow all valid email addresses :| No support for quoted local parts. No support for punycode domains. Disappointing. Use <input type="text" inputmode="email"> instead to just get the email-optimized keyboard on phones without the misguided validation.
- friendzis 2y ago
  It's not the fact that software engineering is broken saddens me as much as the extent. Email is older than absolute majority of active developers and yet, it seems, simple knowledge like "what is email address" remains such an arcane knowledge that you are being looked at weird when present something a tiny little bit more correct than the status quo. Where else can we assume that the common knowledge is flat out wrong?
  - Akronymus 2y ago
    >"what is email address" Anything you can send an email to that is received, as far as I am concerned. I have my own domain, so why ahould I be forced to add an arbitrarily long string to it to be able to receive the mail? Or exclude <site>@myDomain.com from being input on <site>? Or the worst of the worst: Disallow all but a few domains for emails. At this point, not validating it cient side at all is IMO the correct approach, and instead send a verification email.
    - friendzis 2y ago
      > Anything you can send an email to that is received, as far as I am concerned. 100% this. The only acceptable hard validation is to check whether there is an @ between some characters. something like `.@.` in regex. It makes sense to do sanity checking (soft validation) on client side. There is 99.9% chance that `muppet@gmial.com` is wrong, outright rejecting that is wrong, though.
- 85392_school 2y ago
  > No support for punycode domains Really? I tested with a punycode domain on regex101 and it worked fine, do you mean that it only works with ones already converted to punycode?

This is particularly annoying on mobile since on-screen keyboards won't adjust to an email input layout and autocorrect will screw up basically any email address as soon as a "." character triggers autocomplete to commit it's guess.

icar 2y ago
And password managers will not fill in the credentials correctly.
- Sander_Marechal 2y ago
  Get a better password manager? I use Bitwarden and it has never failed to fill out the login forms for me.
  - crabmusket 2y ago
    Bitwarden has failed me on some sites.

crabmusket 2y ago

I think that in some cases this could be because the inputs accept usernames as well as emails. But not in all cases, which is annoying!

account42 2y ago

From https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/email#validation https://developer.mozilla.org/en-US/docs/Web/HTML/Element/in... > Browsers automatically provide validation to ensure that only text that matches the standard format for Internet email addresses is entered into the input box. Browsers use an algorithm equivalent to the following regular expression: > /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/; Which doesn't even allow all valid email addresses :| No support for quoted local parts. No support for punycode domains. Disappointing. Use <input type="text" inputmode="email"> instead to just get the email-optimized keyboard on phones without the misguided validation.

friendzis 2y ago
It's not the fact that software engineering is broken saddens me as much as the extent. Email is older than absolute majority of active developers and yet, it seems, simple knowledge like "what is email address" remains such an arcane knowledge that you are being looked at weird when present something a tiny little bit more correct than the status quo. Where else can we assume that the common knowledge is flat out wrong?
- Akronymus 2y ago
  >"what is email address" Anything you can send an email to that is received, as far as I am concerned. I have my own domain, so why ahould I be forced to add an arbitrarily long string to it to be able to receive the mail? Or exclude <site>@myDomain.com from being input on <site>? Or the worst of the worst: Disallow all but a few domains for emails. At this point, not validating it cient side at all is IMO the correct approach, and instead send a verification email.
  - friendzis 2y ago
    > Anything you can send an email to that is received, as far as I am concerned. 100% this. The only acceptable hard validation is to check whether there is an @ between some characters. something like `.@.` in regex. It makes sense to do sanity checking (soft validation) on client side. There is 99.9% chance that `muppet@gmial.com` is wrong, outright rejecting that is wrong, though.
85392_school 2y ago
> No support for punycode domains Really? I tested with a punycode domain on regex101 and it worked fine, do you mean that it only works with ones already converted to punycode?