>Why does it matter if a spammer knows your address is valid, if they've already decided it's valid enough to spam it? Because then they can dictionary attack

>Why does it matter if a spammer knows your address is valid, if they've already decided it's valid enough to spam it? Because then they can dictionary attack a large list of random emails, send out a trivial campaign, and collect a list of valid users then sell it to someone else.