News for hackers. Stuff that matters.

A comment on Yahoo Triples Estimate of Breached Accounts to 3B. Parent comment

Re:Yahoo Triples Estimate of Breached Accounts to 3B by dragonwriter on Tuesday October 03, 2017 @05:57PM (#15396576)
> I’ve run a fair amount of email campaigns where we strip out the + if gmail is the domain to ensure it doesn’t end up in some weird filter.

Which works, until the Gmail users who bother using + addresses with filters start giving all legitimate senders + addresses and sending everything thst doesn't have one and doesn't come from Google straight to deletion (possibly with a stop by “mark as spam” en route.)

[ Parent | on HN ]
Re:Yahoo Triples Estimate of Breached Accounts to 3B by BoorishBears on Tuesday October 03, 2017 @06:02PM (#15396600)
The problem is not all legitimate sites/sources will actually accept '+' as a valid email character even though the RFC says it's a valid email character.
[ Parent | on HN ]
Re:Yahoo Triples Estimate of Breached Accounts to 3B by odammit on Tuesday October 03, 2017 @06:03PM (#15396606)
Jinx. :D
[ Parent | on HN ]
Re:Yahoo Triples Estimate of Breached Accounts to 3B by odammit on Tuesday October 03, 2017 @06:02PM (#15396602)
Yeah problem with that is the number of crappy regexps sites use that stop you from signing up with a + address in the first place.
[ Parent | on HN ]