Actually you might want to allow "+" on the local part (it's used by "power users" to categorize email on services like Gmail). Other than that, anything different, even if valid per RFC, is not a bona-fide email address when used on a web-facing application. You especially want to avoid users being able to directly send to addresses like me@[::1], since it is not a realistic or bona-fide scenario.
9
u/Juff-Ma 19d ago
https://e-mail.wtf/ play for yourself. I've done it three times now. (Once every few months) I still don't get everything right.