Solved Email bans can be bypassed with sub-addressing and dots

[DeltaHF]

It is trivial to bypass XenForo email bans using sub-addressing (also known as "plus addressing") or, for some email providers such as Gmail, by inserting . dots between the local-part characters of the address.

To reproduce:

1. Ban example@gmail.com.
2. Attempt to register a new account with example+alias@gmail.com. The request should be blocked but it will be successful and the registration confirmation email will be delivered to example@gmail.com...

Read more

Continue reading...