Skip to content

Stéphane Gourichon

← Customer feedback for Have I Been Pwned

My feedback

2 results found

  1. Make domain notification more salient

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    1 comment  ·  General  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    Stéphane Gourichon supported this idea  · 
    Stéphane Gourichon shared this idea  · 

  2. Enable search and notifications for email addresses using the "+" syntax

    2,646 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    117 comments  ·  General  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    An error occurred while saving the comment
    Stéphane Gourichon commented  · 

    # Failure and success of the suffix idea

    ## Failure of my.email+anysuffix@anydomain.tld option

    I agree with Troy here, I see no clean easy handling of + suffix.

    For example, whitelisting "providers known to use +syntax" obviously fails with independent sites.

    Actually, the suffix trick is really (and should be) an implementation detail, not something that can be detected and handled.

    For anyone not convinced you have to know that the character triggering suffix behavior is not standardized. In postfix for example you can set whatever character you want.

    And indeed I chose an alternate character because of so many braindead sites that forbid the + character when registering.

    ## Success of the *@mydomain.org or *@mysubdomain.majorprovider.com option

    If the e-mail provider really allows you a full subdomain, you can receive mail at e.g. postmaster@mysubdomain.majorprovider.com or one of the other options, then just use HIBP Domain Search!

    Now, where is the form to register for domain notification?

    The feature is mentioned on https://haveibeenpwned.uservoice.com/forums/275398-general/suggestions/15109419-include-email-addresses-or-some-info-for-domain yet not seen on main site.

    Thank you for any hint.

Feedback and Knowledge Base

(thinking…)