He means the validation of your sign-ups' email addresses is too restrictive and disallowing the '+' (which is valid).

In fact, an awful lot of characters usually excluded are valid. There's a spec somewhere.