[GH-ISSUE #780] [BUG] Cannot use anonaddy alias to sign up to mailing list as cannot respond to confirmation request. #536

Closed
opened 2026-03-01 17:48:02 +03:00 by kerem · 2 comments
Owner

Originally created by @DavidPesticcio on GitHub (Oct 20, 2025).
Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/780

When responding to a specific return address to confirm the request to join the mailing list, all I get is a message sent to myself?

When subscribing via: https://oss-security.openwall.org/subscribe

A response is sent to the subscribing email address requesting a confirmation response email to a specific email address.

e.g.

<snip>

To confirm that you would like

   oss-security.openwall.org@<anonaddy-username>.mailer.me

added to the oss-security mailing list, please send
an empty reply to this address:

   oss-security-sc.1760982419.ohedmfbjgcdaadampghm-oss-security.openwall.org=<anonaddy-username>.mailer.me@lists.openwall.com

<snip>

When clicking the send link for the approrpiate alias at https://app.addy.io/aliases the above format is converted to an anonaddy reply address which results in;

oss-security.openwall.org+oss-security-sc.1760982419.ohedmfbjgcdaadampghm-oss-security.openwall.org=<anonaddy-username>.mailer.me=lists.openwall.com@<anonaddy-username>.mailer.me

Which results in an email being sent to the anonaddy alias instead of the intended recipient. Therefore preventing the ability to confirm the request to join the mailing list.

Presumably the issue is with the return email address using a similar format to anonaddy but the wrapping and unwrapping of the address is not working as expected. 🙁

Originally created by @DavidPesticcio on GitHub (Oct 20, 2025). Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/780 When responding to a specific return address to confirm the request to join the mailing list, all I get is a message sent to myself? When subscribing via: https://oss-security.openwall.org/subscribe A response is sent to the subscribing email address requesting a confirmation response email to a specific email address. e.g. ``` <snip> To confirm that you would like oss-security.openwall.org@<anonaddy-username>.mailer.me added to the oss-security mailing list, please send an empty reply to this address: oss-security-sc.1760982419.ohedmfbjgcdaadampghm-oss-security.openwall.org=<anonaddy-username>.mailer.me@lists.openwall.com <snip> ``` When clicking the **send** link for the approrpiate alias at https://app.addy.io/aliases the above format is converted to an anonaddy reply address which results in; ``` oss-security.openwall.org+oss-security-sc.1760982419.ohedmfbjgcdaadampghm-oss-security.openwall.org=<anonaddy-username>.mailer.me=lists.openwall.com@<anonaddy-username>.mailer.me ``` Which results in an email being sent to the anonaddy alias instead of the intended recipient. Therefore preventing the ability to confirm the request to join the mailing list. Presumably the issue is with the return email address using a similar format to anonaddy but the wrapping and unwrapping of the address is not working as expected. 🙁
kerem closed this issue 2026-03-01 17:48:02 +03:00
Author
Owner

@willbrowningme commented on GitHub (Oct 20, 2025):

That sounds like you are sending from an email that isn't listed as a verified recipient on your addy.io account.

https://addy.io/faq/#im-trying-to-reply-send-from-an-alias-but-the-email-keeps-coming-back-to-me-whats-wrong

If you believe it is a verified recipient then please send me an email with specific details of the alias so that I can check the logs.

<!-- gh-comment-id:3423621964 --> @willbrowningme commented on GitHub (Oct 20, 2025): That sounds like you are sending from an email that isn't listed as a verified recipient on your addy.io account. [https://addy.io/faq/#im-trying-to-reply-send-from-an-alias-but-the-email-keeps-coming-back-to-me-whats-wrong](https://addy.io/faq/#im-trying-to-reply-send-from-an-alias-but-the-email-keeps-coming-back-to-me-whats-wrong) If you believe it is a verified recipient then please [send me an email](https://addy.io/contact/) with specific details of the alias so that I can check the logs.
Author
Owner

@DavidPesticcio commented on GitHub (Oct 21, 2025):

This issue was resolved by @willbrowningme to update the validation method in relation to the code snippet below;

$validEmailDestination = filter_var($destination, FILTER_VALIDATE_EMAIL);

Many thanks Will, much appreciated. 👍

<!-- gh-comment-id:3426420586 --> @DavidPesticcio commented on GitHub (Oct 21, 2025): This issue was resolved by @willbrowningme to update the validation method in relation to the code snippet below; ``` $validEmailDestination = filter_var($destination, FILTER_VALIDATE_EMAIL); ``` Many thanks Will, much appreciated. 👍
Sign in to join this conversation.
No labels
bug
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/anonaddy#536
No description provided.