Catch-all email domains and the false positives they cause

A catch-all domain accepts mail for any local part. Here is why verification services misreport them, and how to handle them in a signup flow without turning away real customers.