There are other concerns too. I submitted a bug report to Zappos because their emailer did not URL-escape '+' in foo+bar@example.com. Resulting in: http://ww

There are other concerns too. I submitted a bug report to Zappos because their emailer did not URL-escape '+' in foo+bar@example.com. Resulting in: http://www.zappos.com/?email=foo+bar@example.org which was treated as: http://www.zappos.com/?email=foo%20bar@example.org by the browser. It worked fine when I manually encoded the '+'.