Catch-all (\*) setup is the best, until a spammer hits a gibberish localpart (on... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mustaphah 8 months ago | parent | context | favorite | on: Gmail will no longer support checking emails from ...

Catch-all (*) setup is the best, until a spammer hits a gibberish localpart (on purpose) and your domain cheerfully accepts it.

Don't get me wrong, I use catch-all too (don't tell spammers).

layer8 8 months ago [–]

I whitelist using regular expressions (specific prefixes mostly). Gibberish and random localparts are unlikely to match those, it effectively never happens.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact