Completely agree with Joe. Normally if we did that we saw some situation where they were using something other than a space perhaps a pipe or a plus or a non-printable character or something else. So we made the rest of the role like that to future proof it against other variants of the same spam.
On Sun, Apr 25, 2021, 08:51 Joe Quinn <headprogrammingc...@gmail.com> wrote: > On 4/23/21 2:52 PM, David B Funk wrote: > > On Fri, 23 Apr 2021, Steve Dondley wrote: > > > >> I'm looking at KAM.cf. There is this rule: > >> > >> body __KAM_WEB2 /INDIA based > >> IT|indian.based.website|certified.it.company/i > >> > >> I'm wondering if there is a good reason why a singe period is used > >> instead of something like \s+ which would catch multiple spaces > >> whereas a singe period doesn't. > > > > Because '/indian.based.website'/ will match 'indian-based_website' but > > \s will not. > > > > > This is the real reason (or at least, it was for all of my contributions > to KAM.cf). I was also concerned about tricks like , which is > visibly a space but has all the technical characteristics of > non-whitespace. Using "." was easier than knowing everything about > unicode codepoints. > >