News for hackers. Stuff that matters.
Re:Complexities of e-mail validation logic by mderazon on Monday May 24, 2021 @04:32PM (#27269352)
Spammers aside, I'm interested to know what strategy different saas companies do in regards to users creating an account with + alias - Do you let users create multiple accounts with the same email but different + alias ? Or do you recognize that it's an alias and say that the account already exists ?

Not all email providers support the + notion so you'd have to run domain lookup on some hard coded list

Re:Complexities of e-mail validation logic by megous on Monday May 24, 2021 @09:16PM (#27271655)
Why should they care though? Anyone with a catchall can create 7 billion normal looking addresses under their domain. It's not like it would prevent anything.

Also anyone with gmail address can also place dots almost anywhere into the local part, to create another unique address without using a + sign.

Re:Complexities of e-mail validation logic by mderazon on Tuesday May 25, 2021 @05:19AM (#27274683)
Because of spammers creating garbage accounts on your platform
Re:Complexities of e-mail validation logic by megous on Tuesday May 25, 2021 @08:57AM (#27276222)
Yeah, but why care about email address format, if it's not going to stop spammers anyway, and you're just risking losing legitimate customers if you mess up trying to mangle part of an address you should not be touching according to the recommendation in the standard?
Re:Complexities of e-mail validation logic by SilverRed on Monday May 24, 2021 @09:53PM (#27271849)
The email spec considers these different emails. It's not a websites job to worry about how an individual host treats them. Gmail also treats . in the user section as useless but most hosts do not.