I also reached out to them on Twitter but they directed me to this form. I followed up with them on Twitter with what happened in this screenshot but they are now ignoring me.

  • macniel@feddit.de
    link
    fedilink
    English
    arrow-up
    322
    arrow-down
    2
    ·
    11 months ago

    When you insist on implementing your own email address validation…

    • DeltaTangoLima@reddrefuge.com
      link
      fedilink
      English
      arrow-up
      167
      ·
      11 months ago

      I have my own domain that uses a specific 2-letter ccTLD - it’s a short domain variation of my surname (think “goo.gl” for Google). I’ve been using it for years, for my email.

      Over those years, I have discovered an astonishing number of fuckheaded organisations whose systems insist I should have an email address with a “traditional” TLD at the end.

      • stickmanmeyhem@lemmy.world
        link
        fedilink
        English
        arrow-up
        87
        arrow-down
        1
        ·
        11 months ago

        A few years back I bought a .family domain for my wife and I to have emails at ourlastname.family That lasted a week because almost every online service wouldn’t accept it. Now we have a .org

        • CosmicTurtle@lemmy.world
          link
          fedilink
          English
          arrow-up
          42
          ·
          11 months ago

          Doesn’t surprise me one bit. I’ve noticed that a lot of websites will only accept .com and a few will only accept email addresses from popular providers (Gmail, Hotmail, outlook, etc.)

          My guess is that it’s trying to reduce spam and fake account generation.

          • deweydecibel@lemmy.world
            link
            fedilink
            English
            arrow-up
            56
            ·
            11 months ago

            My guess is that it’s trying to reduce spam and fake account generation.

            Thus preventing the growth of any small providers and further entrenching Microsoft, Google, Apple, and a handful of others as the only “viable” options.

          • MBM@lemmings.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            11 months ago

            Feels very relevant to the fediverse, with how people tend to compare it to email.

          • Throwaway@lemm.ee
            link
            fedilink
            English
            arrow-up
            9
            arrow-down
            14
            ·
            11 months ago

            Yeah, that’s it pretty much.Like 99% of your legitimate users are going to be standard gmail/yahoo/hotmail/etc. You see a user from ten minute mail, it’s probably some shady shit.

            • CosmicTurtle@lemmy.world
              link
              fedilink
              English
              arrow-up
              22
              arrow-down
              1
              ·
              11 months ago

              Not necessarily shady.

              I use 10 minute email if a merchant requires me enter an email account before seeing the total price on an item (including shipping). That’s the most common pattern I’ve seen. My guess is that they want to ping you to complete the purchase.

              Or a website might require free registration in order to view the content.

              One place I use 10-minute email is actually Spotify. I didn’t want to give them my Gmail address since your name is exposed to the world via their sharing API.

              Don’t get me wrong, there are a lot of bad uses for it as well. But privacy minded people use it too.

        • frozen@lemmy.frozeninferno.xyz
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          11 months ago

          I went with .io specifically for this. It doesn’t look special or anything, it’s just cheaper than .org and accepted anywhere I’ve tried, so far.

      • lunarul@lemmy.world
        link
        fedilink
        English
        arrow-up
        16
        ·
        edit-2
        11 months ago

        My first email address was @k.ro (a free email provider many many years ago) and many websites thought a valid second-level domain name cannot be just one letter

      • PM_Your_Nudes_Please@lemmy.world
        link
        fedilink
        English
        arrow-up
        16
        ·
        11 months ago

        Same. There are a lot of sites that just outright refuse to accept my email address that I’ve had for years, because it’s not a .com TLD.

        • nybble41@programming.dev
          link
          fedilink
          English
          arrow-up
          3
          ·
          11 months ago

          CVS and E*Trade both refused to accept my fairly standard user@mydomain.info address during initial registration, but had no issue changing to that address once the account was created. It would be nice if their internal teams communicated a bit better.

    • cley_faye@lemmy.world
      link
      fedilink
      English
      arrow-up
      50
      arrow-down
      2
      ·
      11 months ago

      The only useful email validation is “can I get an MX from that” and “does it understand what I’m saying in that SMTP”. Anything else is someone that have too much free time.

        • vithigar@lemmy.ca
          link
          fedilink
          English
          arrow-up
          41
          ·
          11 months ago

          Definitely a timesaver. Much faster to get incorrect email validation that way then to try building it yourself.

          • Archer@lemmy.world
            link
            fedilink
            English
            arrow-up
            15
            ·
            11 months ago

            Skip the building step and go straight to pulling your hair out over why it’s not working! Efficiency!

        • Katana314@lemmy.world
          link
          fedilink
          English
          arrow-up
          15
          ·
          11 months ago

          That probably lead to this exchange.

          Stack Overflow is useful, but…it needs more than a little parsing for useful answers.

        • felbane@lemmy.world
          link
          fedilink
          English
          arrow-up
          14
          ·
          11 months ago

          I know (hope) you’re being facetious, because the objectively best way to do email validation is to send a fuckin email to the provided address.

        • AnAngryAlpaca@feddit.de
          link
          fedilink
          English
          arrow-up
          2
          ·
          11 months ago

          To be valid, the email just has to match [anything@anything]. ,🙃@localhost can be perfect legal if localhost supports utf8 in usernames.

    • KickMeElmo@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      33
      arrow-down
      1
      ·
      11 months ago

      I’ve encountered this because my domain has a hyphen in it. Very irritating.

    • aard@kyu.de
      link
      fedilink
      English
      arrow-up
      21
      ·
      11 months ago

      I’m not aware of any correct email validations. I’m still looking for something accepting a space in the localpart.

      Also a surprising number of sites mess with the casing of the localpart. Don’t do that - many mailservers do accept arbitrary case, but not all. MyName@example.com and myname@example.com are two different mail addresses, which may point to the same mailbox if you are lucky.

      • CosmicTurtle@lemmy.world
        link
        fedilink
        English
        arrow-up
        27
        arrow-down
        3
        ·
        11 months ago

        The only correct regex for email is: .+@.+

        So long as the address has a local part, the at sign, and a hostname, it’s a valid email address.

        Whether it goes somewhere is the tricky part.

        • xantoxis@lemmy.world
          link
          fedilink
          English
          arrow-up
          24
          arrow-down
          2
          ·
          edit-2
          11 months ago

          Sorry, this is not a correct regex for an email address.

          Sending using mail on a local unix system? You only need the local part.

          STOP VALIDATING NAMES AND EMAIL ADDRESSES. Send a verification email. Full stop. Don’t do anything else. You really want to do this anyway, because it’s a defense against bots.

          • Turun@feddit.de
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            1
            ·
            11 months ago

            I think it’s fair to prevent users from causing mail sent to your internal systems. It probably won’t cause any issues getting mail to the machine inbox for (no domain name), but it reasonably makes security uneasy.

            • xantoxis@lemmy.world
              link
              fedilink
              English
              arrow-up
              7
              ·
              11 months ago

              The statement I was responding to was “This is the correct email regex”. There is no correct email regex. Don’t parse emails with a regex. You probably don’t need to parse emails at all.

          • elrik@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            11 months ago

            Yes, but no. Pretty much every application that accepts an email address on a form is going to turn around and make an API call to send that email. Guess what that API is going to do when you send it a string for a recipient address without an @ sign? It’s going to refuse it with an error.

            Therefore the correct amount of validation is that which satisfies whatever format the underlying API requires.

            For example, AWS SES requires addresses in the form UserName@[SubDomain.]Domain.TopLevelDomain along with other caveats. If the application is using SES to send emails, I’m not going to allow an input that doesn’t meet those requirements.

            • xantoxis@lemmy.world
              link
              fedilink
              English
              arrow-up
              6
              arrow-down
              1
              ·
              11 months ago

              Therefore the correct amount of validation is that which satisfies whatever format the underlying API requires.

              You mean the validation which the underlying API will perform on its own? You don’t need to do it.

          • laurelraven@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            5
            ·
            11 months ago

            And this right here is a great example of why simple basic RegEx is rarely adequate

            At the very least, should be something like

            ^[^@\s]+@([^@\s.]+\.)+[^@\s.]+$

            I’m like 99% sure I missed at least a few cases there, and will say “please don’t use this for anything production”

            • jpeps@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              11 months ago

              Here’s two: you can have multiple @s forming relays in an email address, and you can also break all the rules around dots and spaces if you put quotes around the local part, eg ".sarah.."@emails.com

      • bjorney@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        There isn’t a perfect one afaik - this one is apparently the closest you can get (https://emailregex.com) (?:[a-z0-9!#$%&'+/=?^_{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_~-]+)|"(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21\x23-\x5b\x5d-\x7f]|\[\x01-\x09\x0b\x0c\x0e-\x7f])")@(?:(?:a-z0-9?.)+a-z0-9?|[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-][a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]|\[\x01-\x09\x0b\x0c\x0e-\x7f])+)])