News for hackers. Stuff that matters.
Re:Let them paste passwords by Pxtl on Thursday May 18, 2017 @10:37AM (#14367546)
Yup. The most email validation I evern implement is "there must be an @ sign with stuff before and after the @ sign". Maybe require a dot in the latter space.
Re:Let them paste passwords by vlunkr on Thursday May 18, 2017 @12:58PM (#14368880)
I know lots of developers (myself included) who thought they could write a functional email regex. Eventually you learn that in the end, the way to validate an email address is to send an email.
Re:Let them paste passwords by OJFord on Friday May 19, 2017 @12:34PM (#14377229)
> Eventually you learn that in the end, the way to validate an email address is to send an email.

In my experience as a user, most people in the end also validate the email address by sending an email, but do no learning.

Re:Let them paste passwords by benchaney on Thursday May 18, 2017 @10:57AM (#14367753)
Strictly speaking, the dot in the latter space isn't actually necessary. It needs to be a resolvable domain, but if you bought a TLD you could be "name@tld"
Re:Let them paste passwords by bitJericho on Thursday May 18, 2017 @11:32AM (#14368071)
I don't think an @domain is required if it's an email address on the same mail server.
Re:Let them paste passwords by OJFord on Friday May 19, 2017 @12:37PM (#14377260)
That certainly used to work on Gmail; I haven't tried recently.

(Obvious caveat being that any provider can trivially append @provid.er if you don't specify, so this isn't really proof that email is specified that way.)

Re:Let them paste passwords by eximius on Thursday May 18, 2017 @12:57PM (#14368873)
Wow, that is literally the only reason I would want a TLD
Re:Let them paste passwords by fanf2 on Thursday May 18, 2017 @08:06PM (#14372072)
ICANN forbids application records at the apex of a TLD. The only TLDs that do funky things like this are ccTLDs.

And if you try to actually use a bare TLD you will crash hard into collisions with unqualifed domains and search paths. So, fun as a hack to amuse fellow techies but not useful for anything real.

Re:Let them paste passwords by TremendousJudge on Thursday May 18, 2017 @11:29AM (#14368048)
...is there someone out there who did this?
Re:Let them paste passwords by benchaney on Thursday May 18, 2017 @11:37AM (#14368131)
Not that I'm aware of. Although I wouldn't be surprised if google did it for their employees. They already own the google TLD, they could very easily make it point to the google.com emails.
Re:Let them paste passwords by OJFord on Friday May 19, 2017 @12:38PM (#14377277)
How many HN-reading googlers have you just made to send 'Test' emails to themselves, I wonder!
Re:Let them paste passwords by eridius on Thursday May 18, 2017 @01:35PM (#14369258)
Can you actually attach an MX record to a tld?
Re:Let them paste passwords by dj1yfk on Thursday May 18, 2017 @01:58PM (#14369477)
Re:Let them paste passwords by eridius on Thursday May 18, 2017 @02:03PM (#14369538)
Huh, cool. Though I don't see a lot of those records myself. For example, `dig MX ai.` gives me the MX record for ai., but I can't see any MX records for as., bj., or dj.
Re:Let them paste passwords by marksomnian on Thursday May 18, 2017 @10:46AM (#14367632)
.+@.+\..+
Re:Let them paste passwords by nradov on Thursday May 18, 2017 @11:41AM (#14368166)
That regex is defective. See benchaney's reply above.
Re:Let them paste passwords by hfsktr on Thursday May 18, 2017 @12:03PM (#14368387)
.+@.+(\..+)?

should satisfy you both right? I use the original or a form of usually when I had to check emails.

Re:Let them paste passwords by dasil003 on Thursday May 18, 2017 @12:37PM (#14368688)
That's identical to just doing .+@.+
Re:Let them paste passwords by simcop2387 on Thursday May 18, 2017 @12:17PM (#14368491)
Fully qualified domains actually end in a . If you're allowing sally@google then you must also allow sally@google. To be valid
Re:Let them paste passwords by eridius on Thursday May 18, 2017 @01:38PM (#14369289)
No you don't. Email addresses explicitly require any periods in the domain to have at least one (non-period) character after the period. From RFC 5322, the relevant grammar production for the domain looks like

  dot-atom-text   =   1*atext *("." 1*atext)
(where atext is letters, digits, or a set of specific punctuation characters that doesn't include periods).
Re:Let them paste passwords by simcop2387 on Saturday May 20, 2017 @03:16AM (#14381374)
Ah, I wasn't aware that email addresses defined that differently. it looks like it's also the same way as part of obs-domain as defined by the addr-spec part of that. RFC 822 also seems to say the same thing, it's been way too long since i've tried to read those RFCs.
Re:Let them paste passwords by glandium on Thursday May 18, 2017 @08:13PM (#14372106)
One (probably forgotten) reason people validated email addresses with convoluted regexps is that there are multiple (actually valid per RFC) email addresses formats that can do nasty things. Like explicitly specifying a series of mail servers to go through. They're (hopefully) deprecated and rejected by most servers nowadays, though.
Re:Let them paste passwords by snakeanus on Friday May 19, 2017 @07:17AM (#14374499)
> hopefully

Why?

Re:Let them paste passwords by contras1970 on Friday May 19, 2017 @09:25AM (#14375354)
> By default, this feature is turned off. This closes a nasty open relay loophole where a backup MX host can be tricked into forwarding junk mail to a primary MX host which then spams it out to the world.

http://www.postfix.org/postconf.5.html#allow_untrusted_routi...

Re:Let them paste passwords by sgustard on Thursday May 18, 2017 @12:57PM (#14368877)
Thankfully my email is @@@@@@@.......