Sites with dumb password rules

Re:Sites with dumb password rules by myself248 on Friday September 06, 2019 @08:03AM (#20894855)

Back in '99 or so, there was a company called Halibut Stuff selling T-shirts at Defcon (and presumably other events) that included a free email redirect service with purchase of a shirt.

So I got a shirt that said "[email protected]"

Not too much later, I ended up working in software validation, and I broke so many login forms with that perfectly-valid address, I lost count.

Since then, Halibut Stuff dissolved and the forwarding service is long gone. If some HN reader wanted to set up a Mailinator-like service that generates absurd-yet-RFC-compliant email addresses for such testing, I think there might be a market.

[ Parent | on HN ]

Re:Sites with dumb password rules by boring_twenties on Tuesday September 17, 2019 @08:51PM (#21001523)

Like anyone would actually use such a testing service.

Until a few years ago it was fairly commonplace for sites to reject my perfectly valid addresses just because they had more than one period (i.e., a subdomain) or in one case, ended in the .us TLD.

[ Parent | on HN ]