Hacker News Reader

What does your email server reply with to `RCPT TO:`? Always 250 OK, or does it leak existing inboxes to brute force scrapers?

View on HN

It's actually a catch-all, I tag things that aren't a known alias, but that's on my end.

I think this is the answer.

Can someone explain, please?

What do you mean it's the answer? I meant that the server can't be listing mailboxes that exist in response, because it's not set up like that.

(It could theoretically capture the historically seen addresses, store those, and list those back out I suppose... I'm pretty sure there's no reason for that to be the case though. It's SES if you want to check.)

Reply on news.ycombinator.com