It's pretty common among security-minded folks to fill in addresses using e.g.
email@example.com when disclosing their email address to
company so that they can tell if
company has sold their address if they start getting spam.
But is it just me, or is this pointless? It literally takes only one regex substitution to strip out the
+company portion, and once that's done, the email address is bare. And from the point of view of a spammer, I don't see why this wouldn't be done.
Am I missing something? Is this actually effective? Why/why not?