alt Hacker NewsSurely spammers just turn `me+leaked/[email protected]` into `[email protected]` as well as `[email protected]`, `[email protected]` etc. The cost of stripping any `+postfix` must be about zero even at volume.
Surely spammers just turn `me+leaked/[email protected]` into `[email protected]` as well as `[email protected]`, `[email protected]` etc. The cost of stripping any `+postfix` must be about zero even at volume.
Some people block all mail to non-plus-addressed emails on that inbox, so a plus address is required to be received at all. You could say then spammers will just add a random one, but they wouldn't be getting bounces and would have to guess as much. Still, even stripping the +'ed part is beyond what most of them even bother to do. That dropoff plus normal spam filters works well enough.