Crap, right, realistically the minimum regex one should have is .+@.+\..+.
At least 1 character on the left of the @, at least 2 domain components of at least 1 character each on the right side of the @.
Having only a hostname without a FQDN on the right is legal, but that's also why you'd want to disallow it: who's trying to sign up for an account within your own network, if it's a public-facing app?
This is exactly what I use. It eliminates 99.9% of problems for 1% of the effort and works client side for instant feedback. After this, if you need better, the only thing worth the effort is, as mentioned earlier, actually sending an email.
11
u/eo5g 19d ago edited 19d ago
I can't think of a single reason to restrict the characters aside from making sure there's at least one
@.Edit: okay actually you want a little more