Hacker News new | ask | show | jobs
by luciddreamz 3339 days ago
I'll see if we can get a fix pushed out for this today/ASAP. The issue currently occurs when you have multiple Red Hat accounts that use the same email address (or a sub-addressed version of the same email address, like "chris@gmail.com" and "chris+123@gmail.com".
1 comments
thanksgiving 3339 days ago
> I'll see if we can get a fix pushed out for this today/ASAP. The issue currently occurs when you have multiple Red Hat accounts that use the same email address (or a sub-addressed version of the same email address, like "chris@gmail.com" and "chris+123@gmail.com".

Is this a special case for Google mail or do you assume foo+bar@example.domain is the same as foo@example.domain ? Why?

link
luciddreamz 3339 days ago
It's an abuse prevention mechanism. We do not permit users to have multiple OpenShift Online accounts. See 2.1 in the OpenShift Online terms of service: https://www.openshift.com/legal/terms.html

"You may not (or permit third parties to) create multiple accounts or otherwise access the Services in a manner that is intended to avoid Fees or to circumvent maximum capacity thresholds for the Services."

link
noja 3339 days ago
Then it's a bug right? The uniqueness check should be based on the part before the + sign.
link
thanksgiving 3339 days ago
No, I don't think what google does is standard behavior (not trying to say anything bad about Google; I love Google). However, as far as I know, disallowing + is not a particularly good way of preventing abuse. I won't go as far as to say it semms like bad code but it is pretty close.

I think it is OK to make a special case for Gmail and Google mail but it is counterproductive to try to crown it as a de facto standard.

http://mozilla.wikia.com/wiki/User:Me_at_work/plushaters?use...

link
noja 3339 days ago
huh? Google's special behaviour is that they are blind to dots in the user part of the address.

The + sign is not anything to do with Google.

link
thanksgiving 3338 days ago
Oh I didn't know. Just found https://tools.ietf.org/html/rfc5233 after trading what you wrote.

I just assumed + is a valid character and a+b@example.domain would be a valid email address independent of a or b. But it seems we shouldn't allow + or -- when people sign up for a new email address?

link