If you run your own email, you can catch the moderately motivated spammer: use a character other than + as the segmenter, and a honeypot +.
<[email protected]>
<[email protected]>
> <[email protected]> triggers an immediate block.
This doesn't work. I've seen legitimate companies just strip everything from the + onwards.
Well, "legitimate". There's no legitimate reason for a company to remove anything from user-provided e-mail address.
Legitimate reason != legitimate company
Doing something like this is extra work, implying the company in question has either some malicious intent (e.g. spamming, or sharing data with third parties behind users' backs), misguided (e.g. thinking this is a proper way of dealing with user account spam), or just don't give a damn. Either one of these cases reflects badly on such company.
You can reflect it however badly you want, I'm just saying these weren't companies most people would consider shady or cutoff business with over this issue.
Using + isn't the best method as some services just won't allow having + sign in the email address (probably shitty email address detection) and of course spammers can simply strip the alias parts and send you mail.
You'd have a better luck with *@user.your.domain if you can give each user a unique domain.
Re:Firefox Monitor
by ghostbrainalpha on Wednesday June 05, 2019 @01:32PM
(#20106907)
Are you suggesting buying a new domain for each email address? That could get extremely expensive to maintain.
I bought a single domain @MyEmail.org, and create a new user for each site I sign up with that forwards to my gmail.
[email protected], [email protected], [email protected] etc...
No. Your case works for a single person but for more people on a single domain, you would want to do,
[email protected] [email protected]
(Instead of [email protected])
[email protected] [email protected]
and so on. So, those services have no way of fooling you by tampering with the alias parts.
But of course this isn't easy unless you roll your own mail server.
Re:Firefox Monitor
by ghostbrainalpha on Wednesday June 05, 2019 @03:46PM
(#20108392)
Thanks for the breakdown. I didn't think about using Sub Domains!
You can also do something similar with Gmail (and probably other providers) using "+" in your username, e.g. "[email protected]". This creates a unique email address that delivers to your Gmail account as if the "+<whatever>" were absent. This is more easily defeated if you're a moderately motivated spammer.