Hacker News Reader

Hacker News

Comment by lvass | Hacker News Reader

Full thread

lvass

>Select this type to use your email provider's sub-addressing (aka "plus addressing" or "aliasing")

Anyone knows which providers do this?

>e.g. alice+gsd4aqqe@bitwarden.com)

If this pattern becomes popular enough, it won't take long until services strip out the + part entirely.

View on HN

Worse, I have used services where they changed the email validation code years after setting up my account and then I could no longer log in because my email address had a + in it. So I don't do this anymore.

Sneakemail, which lets you do it with hyphens, works pretty well, though.

I've been using catch-all addresses for a decade (with Google Apps.. rip) and I doubt that will ever get counter-measured. It's been really nice to catch those few cases where a service clearly sold my email to advertiser.

FWIW, the OP was talking about subaddressing, not catch-all addresses.

Sadly, data handlers have become savvy to this and already strip the address part after + (a trivial effort) before they resell mailing lists.

If you catch all then you don't need the + anymore, right?

Also, the + breaks so, so many sites.

I've switched to a custom domain and from.<sitename>.<random>@

Many services already do not accept email addresses with “+” in them. In those cases it’s usually possible to generate a unique email using extra periods instead: https://frdmtoplay.com/finite-gmail-accounts/

I use me.<random>@mydomain.com (which has wildcard with prefix), no one blocks dots typically.

Indeed, you can use other characters as well. I've got the underscore '_' on mine, and use it for all my random-signup emails. It's great, once in a blue moon you find one that leaks your ID or spams you, and I can then immediately bin that variant.

> If this pattern becomes popular enough, it won't take long until services strip out the + part entirely.

Why would they do that? Specifically to spam more discreetly? But it's trivial to auto-filter all non-plus addresses to the trash.

It’s already the case on a lot of websites, I had issues using +plus addresses to register accounts since at least a decade.

gmail has always supported this and its pretty popular already.

Gmail supports it.

Well, subaddressing is actually part of an RFC [1], so no, they won't.

1: https://datatracker.ietf.org/doc/html/rfc5233

I don't think people who make money from selling email addresses care about RFCs

Lowes and plenty of other sites already forbid plus addressing.

      NOTE: Because the encoding of detailed addresses are site and/or
      implementation specific

`+` or any other encoding is not part of an RFC, and I don't think the existence of subaddressing is either.

Reply on news.ycombinator.com