I use plus addressing all the time. Even though plus addresses only show up rarely in the breaches, imo they're still important to support queries for (because misses are just as important as hits). It seems like an easy enough thing to implement, given that RFC5233 specifies the behavior and that hibp already has infrastructure for handling multi-queries for domain searches.
Since it was mentioned in the edit, my wife doesn't use plus addressing but she regularly uses periods to achieve a similar effect. This one's a lot trickier to rule on, since different email domains handle it differently. But given the popularity of gmail, I think it's worth supporting, it's just not clear how high a priority it should be nor how much work it'd take to do well.
wrengr
I use plus addressing all the time. Even though plus addresses only show up rarely in the breaches, imo they're still important to support queries for (because misses are just as important as hits). It seems like an easy enough thing to implement, given that RFC5233 specifies the behavior and that hibp already has infrastructure for handling multi-queries for domain searches.
Since it was mentioned in the edit, my wife doesn't use plus addressing but she regularly uses periods to achieve a similar effect. This one's a lot trickier to rule on, since different email domains handle it differently. But given the popularity of gmail, I think it's worth supporting, it's just not clear how high a priority it should be nor how much work it'd take to do well.