cavelamb himself wrote:


That is not a particularly good idea, Vaughn.
In doing so, your reply actually validates your real address,
regardless of what name you give them...
Only if they have encoded something unique in each message that links it
back to who they sent it to. Certainly, some phishers do exactly that.
But, if you go to their hacked web site and enter a username and
password, it normally will NOT have your email address available unless
you give them that. (There are exceptions, such as if they can scrounge
around in your cookies. I don't allow any sites to see cookies left by
other sites for this reason.)

Jon