Stop validating email addresses with your complex regex

Re:Stop validating email addresses with your complex regex by ch0wn on Thursday September 06, 2012 @05:16PM (#4486298)

If your service tells me that [email protected] is an invalid address, you have to live without me. I can't count how many mails I sent to websites incorrectly validating email fields. However, password validation is mostly even worse. Just stop over-validating already!

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by thebigshane on Thursday September 06, 2012 @05:56PM (#4486495)

Hushmail has a fantastic pseudonym service (among other fantastic services) for this use case.

  real email: [email protected]
  servicexyz: [email protected]
  serviceabc: [email protected]

https://www.hushmail.com/ (no affiliation)

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by erichocean on Thursday September 06, 2012 @06:02PM (#4486513)

Agreed that password validation is the worst. (Github, I'm looking at you.)

Even worse than excessive validation is when they make you change your password often, for no apparent reason.

On some sites that do both (ahem Apple), the only way I can login if I haven't been there in awhile is the security questions or the password reset mechanism.

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by ch0wn on Friday September 07, 2012 @08:10AM (#4488641)

Wow, I never noticed that Github enforces password rules, as well (Must contain one lowercase letter, one number, and be at least 7 characters long.). My passwords are usually HMAC-based, so they'll most likely validate.

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by jbn on Sunday September 09, 2012 @03:44PM (#4496726)

even validation of first & last names is usually awful. For instance many sites tell you that having a dash "-" in your first name is invalid... yet a lot of French (first or last) names contain that character..

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by naww on Friday September 07, 2012 @03:56PM (#4490884)

Those who happen to own domain name and some small hosting plan with Cpanel can easily redirect all mail to that domain for specific email address. This way you can replace plus sign with dot that works everywhere.

And I've have my problems with short addresses before with Microsoft. http://answers.microsoft.com/en-us/windowslive/forum/liveid-...

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by chimeracoder on Thursday September 06, 2012 @10:58PM (#4487509)

No, you forcing me to include a number does not make my password more secure.

Weak password: correcthorsebatterystaplefoobarbaz

Strong password: password1

The worst is when they do that and enforce a maximum password of 8 or 12 characters (I'm looking at you, every bank in the US ever).

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by RenierZA on Friday September 07, 2012 @05:17AM (#4488255)

Is the top password not stronger than the bottom one in your example?

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by mike-cardwell on Friday September 07, 2012 @05:27AM (#4488272)

That was his point. Web services incorrectly classifying the strength of user supplied passwords.

[ Parent | on HN ]

Re:Stop validating email addresses with your complex regex by mhartl on Saturday September 08, 2012 @01:49PM (#4493479)

The labels ("strong", "weak") are ironic.

[ Parent | on HN ]