768
top 50 comments
sorted by: hot top controversial new old
[-] geissi@feddit.org 1 points 36 minutes ago

I vaguely remember a panel where a guy went through various cases like these.

One of the things that stood out is that not every email provides implements the same specs, so one provider might allow you to set up a "valid" email address that might not be able to communicate with other providers as they consider it "invalid".

[-] camelbeard@lemmy.world 4 points 1 hour ago

I scored 16/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

I feel pretty good about that

[-] Mikelius@lemmy.ml 1 points 50 minutes ago

And after that, I now can't wait for the next pull request with a regular expression on email validation to come through.

[-] pyre@lemmy.world 11 points 5 hours ago

nice. though valid but obsolete is not a thing... if it's obsolete it's invalid.

[-] codapine@lemmy.zip 11 points 6 hours ago

Also as the registrant of one of those new fancy TLDs, much like the owner of this website (email.wtf), their own email addresses will fail those stupid email validation checks that only believe in example@example.[com|net|org]

Shitty websites will fail "example@email.wtf", guaranteed - despite it being 100% valid AND potentially live.

Source - I have a ".family" domain for my email server. Totally functional, but some shitty websites refuse to believe it.

[-] BlushedPotatoPlayers@sopuli.xyz 1 points 1 hour ago

I have a spam collecting address @freemail.hu , the domain is live and working since 96, sometimes it's not accepted, because it's not Gmail I guess

[-] aeiou_ckr@lemmy.world 1 points 1 hour ago

Same as I have a .party domain. So I made a place holder (looking at you progressive) email ___+haslazydevs@gmail.com

[-] locuester@lemmy.zip 1 points 3 hours ago

Yeah I have a .engineering for my biz. I also registered mycompanyengineering.com to get through places that won’t take the new TLDs.

Usually banks.

[-] HakunaHafada@lemmy.dbzer0.com 7 points 6 hours ago

12/21. It was highly entertaining though.

[-] wellheh@lemmy.sdf.org 12 points 7 hours ago

I scored 14/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

I actually died at the poop emoji one. Actually amazing awareness to test for that

[-] isaaclyman@lemmy.world 24 points 10 hours ago

Let us recite the email validator’s oath:

If it has something before the @, something between the @ and the ., and something after the ., it’s valid enough.

[-] TechieDamien@lemmy.ml 1 points 18 minutes ago

Fails for when there is no TLD. Just send an email and validate a response eg from a link.

[-] kopasz7@sh.itjust.works 7 points 6 hours ago

The ultimate validation is to see if it gets sent.

[-] refalo@programming.dev 3 points 7 hours ago* (last edited 7 hours ago)

Well... like Bill Clinton said, it depends on what the definition of "is" is.

[-] Turret3857@infosec.pub 10 points 9 hours ago

12/21

are things that are considered out of current spec really "valid" though?

[-] Echolynx@lemmy.zip 4 points 8 hours ago

And is it really valid if my email provider doesn't accept it? If it's not universally accepted or standard, then it doesn't matter if it's technically valid.

[-] Magnum@lemmy.dbzer0.com 9 points 7 hours ago

The RFC is the standard.

[-] KairuByte@lemmy.dbzer0.com 3 points 6 hours ago

If your email provider doesn’t accept email@email.wtf is it then invalid?

[-] rumba@lemmy.zip 19 points 11 hours ago

I lost it at the fork bomb. I mean I hit valid because there was no way it was on the and not valid, but there's no way i'd have expected that. after that I just kept guessing the most stupid answer and did pretty well

[-] ikidd@lemmy.world 25 points 12 hours ago

I gave up when I got like 5 wrong. I've ran mail servers for decades, most of the invalid "valids" would get rejected by any mailservers I've administered.

[-] Xatolos@reddthat.com 1 points 30 minutes ago

Just because it's not something you'd use anymore doesn't mean it isn't valid.

WEP is still a valid form of wireless encryption, but no one would use it anymore (and so would be obsolete). It's still a part of the 802.11 standard.

[-] pressanykeynow@lemmy.world 2 points 8 hours ago

And for a good reason.

[-] spicehoarder@lemmy.zip 5 points 9 hours ago

I scored 18/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

[-] marzhall@lemmy.world 23 points 13 hours ago

I scored 16/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

Damn, and here I thought I had this locked down because I was salty that so many places struggle with + in the email addy. But my god, there's comments?

[-] hodgepodgin@lemmy.zip 3 points 8 hours ago
[-] TomasEkeli@programming.dev 33 points 15 hours ago

I don't validate emails, I test them.

That's your email? OK, what did we send it? if we couldn't send to it or the user can't read it there's no reason to accept it.

OK, maybe I do some light validation first, but I don't trust the email address just because it's email-address-shaped.

[-] who@feddit.org 1 points 6 hours ago* (last edited 5 hours ago)

I don’t validate emails, I test them.

Hooray! You get a gold star.

OK, maybe I do some light validation first,

I hope your "validation" does nothing more than show a warning that the user is allowed to ignore.

I have seen too many systems built by people who think they know what's valid or not before and after the @ sign*, and they are almost always dead wrong. In the worst cases, such systems accept an unusual-looking address and claim to send the expected verification message, but never actually send it. Of course, these systems won't work for some people, and since none of their online docs or support staff know why, those people will be locked out of using the system and funneled into bottomless pit of misery if they try. Please don't build broken garbage like this.

*Fun fact: Not so terribly long ago, even the @ sign didn't have to be present. Some email addresses were bang paths. I'm not sure if any of these are still in use, but it wouldn't shock me to learn that they are.

load more comments (7 replies)
[-] maxwells_daemon@lemmy.world 48 points 16 hours ago

I don't care who the IRS sends, I am not validating emails with spaces on them.

[-] tyler@programming.dev 19 points 15 hours ago

You shouldn’t be validating emails yourself anyway. Use a library or check for only the @ and then send an email confirmation.

[-] who@feddit.org 3 points 6 hours ago* (last edited 6 hours ago)

Use a library

Please, no. If someone wrote email address "validation" complex enough to warrant a library, then their code is almost certainly wrong.

or check for only the @ and then send an email confirmation.

Yes. Do that.

If your boss demands a more detailed check at input time, then make it display warnings, not errors, and continue to the confirmation sending step if the user chooses to ignore the warning.

[-] zurohki@aussie.zone 11 points 13 hours ago

Even if it's a completely valid address and the domain exists, they still might've fat fingered the username part. Going to extreme lengths to validate email addresses is pointless, you still have to send an email to it anyway.

[-] psud@aussie.zone 1 points 3 hours ago

I seem to have annoyed an admin of an instance enough for them to subscribe my signup email to hundreds of dating profiles (presumably using a service that offers to harass someone for you)

Many of them aren't good at validating email

One in ten has one email arrive, asking me to click a link to confirm

9 in ten have 5 emails before I notice them:

  • Please click a link to confirm
  • You received a wink
  • You received a wink
  • You received 3 chat requests
  • You received a link

So it's important to not send emails beyond the validate one to unvalidated addresses, to perfect your service annoying or harassing this parties

Also, use a disposable address for signing up to Lemmy

load more comments (1 replies)
[-] canihasaccount@lemmy.world 42 points 15 hours ago

What if we 👉@👈 ..? 🤭

load more comments (4 replies)
[-] Blackmist@feddit.uk 62 points 17 hours ago

I don't think it really matters what the standard is, because you'll be completely limited by some 25 year old bit of Regex from Stack Overflow that every web developer ever has implemented into their form sanity checks.

load more comments (7 replies)
[-] moseschrute@lemmy.ml 4 points 10 hours ago

I scored 13/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

[-] sexy_peach@feddit.org 9 points 13 hours ago
[-] d00ery@lemmy.world 4 points 11 hours ago

Me too.

I scored 11/21 on https://e-mail.wtf/ and all I got was this lousy text to share on social media.

[-] dawcas@scribe.disroot.org 17 points 15 hours ago

13 right answers and I didn't expect so many lol

I'll never validate some of the 💩 I've learnt today.

load more comments (2 replies)
load more comments
view more: next ›
this post was submitted on 18 Aug 2025
768 points (99.1% liked)

Programmer Humor

25802 readers
2273 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS