News for hackers. Stuff that matters.
Re:Show HN: NBox – Sign up anywhere without giving your emai... by toddmorey on Tuesday June 20, 2017 @04:18PM (#14598206)
Gmail allows you to create unlimited unique addresses by using the + symbol. so you could do: [email protected]. It's worked well for me for a few years.

The only downsides I see are that (very few) sites still complain about the perfectly legal + symbol and some sites / bots are probably starting to reverse engineer that since it still exposes your username. But so far, I've yet to have a single site or service expose my primary mail account, so it at least helps.

Finally: this is a fantastic hack for testing your own signup flows. :)

Re:Show HN: NBox – Sign up anywhere without giving your emai... by bdav24 on Tuesday June 20, 2017 @04:23PM (#14598259)
Hi toddmorey, yes a well-known trick ;) The downside is that the + part can be easily removed by spammers.
Re:Show HN: NBox – Sign up anywhere without giving your emai... by oh_sigh on Tuesday June 20, 2017 @08:20PM (#14599663)
I have a personal Gmail account that I give to real life friends and real met-in-person humans who want to directly contact me. And then a web gmail where everything is labeled with a plus(if websites don't accept the plus, I use a series of periods in the first portion of the email to make it unique. Then, I forward all emails with whitelisted +whatever's from my web mail to my personal mail.
Re:Show HN: NBox – Sign up anywhere without giving your emai... by carc1n0gen on Tuesday June 20, 2017 @04:20PM (#14598234)
Not a Gmail specific thing. That's something you can do with email in general.
Re:Show HN: NBox – Sign up anywhere without giving your emai... by ballenf on Tuesday June 20, 2017 @04:27PM (#14598292)
Not really, according to the spec the '+' can be interpreted as part of the email address. The approach gmail takes seems to have gained widespread adoption, but it's not mandated by the spec.

Believe I saw this on HN recently: http://haacked.com/archive/2007/08/21/i-knew-how-to-validate...

Re:Show HN: NBox – Sign up anywhere without giving your emai... by amenod on Tuesday June 20, 2017 @04:26PM (#14598288)
I believe it is Gmail specific. Cursory search reveals that sendmail does that too, but I don't think it is specified in RFC. Feel free to correct me if I'm wrong.
Re:Show HN: NBox – Sign up anywhere without giving your emai... by e12e on Tuesday June 20, 2017 @10:36PM (#14600247)
It's more Sendmail and Exim and others did it, and Gmail does it too - not the other way around;)

With qmail the "standard"[1] was [email protected], rather than [email protected]. I rather prefer that - but then my (user)name(s) don't contain any hyphens.

Either way I think it looks better with system usernames - [email protected] was/is usually handled as a separate form of alias look-up anyway.

[1] http://www.lifewithqmail.org/lwq.html#dot-qmail-files See section "4.1.5. extension addresses"

[ed: and I recall using tmda as an anti-spam system - it inserts an encrypted tag in the alias portion, that can be stamped with an expiry date, and tied to a sender address (eg hmac(userkey, [email protected]+01012018) => xyxyzzzzz - give [email protected] the address [email protected] - and mail to that address will be accepted from only [email protected] until 1/1/2018.

http://tmda.sourceforge.net/cgi-bin/moin.cgi/AboutTmda ]

Re:Show HN: NBox – Sign up anywhere without giving your emai... by carc1n0gen on Wednesday June 21, 2017 @10:25AM (#14604051)
I don't have a source to a RFC, but all email's I've ever used let me do this. Including multiple different hosting services with my own domains, and my current work which is MS Exchange.