I recently discovered that Google mail accounts (gmail) allows a unique form of e-mail address. It turns out you can use your e-mail name and add a plus sign (+) and some other word to form a valid e-mail address. For example, if I had an account at gmail with my user name of not-my-real-address, I could do something like this:

[EMAIL PROTECTED]

and mail would be delivered to not-my-real-address, but the To: address would show as [EMAIL PROTECTED]

I have done some tests and this works great. I can now create arbitrary e-mail address for various accounts and know where it came from or who leaked my e-mail address.

The problem now arises where certain web sites reject the e-mail address as being invalid because of the inclusion of the plus sign. In my reading of RFC822, pretty much any character except for a few special characters can be used in the address. A plus sign is not considered special as near as I can tell.

I'm I wrong, or are these web sites that do e-mail address validation screwed up?

Gus


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to