An ideal spam protection system would use javascript to bust everything up into a big array, then dynamically rewrite everything on display. For an example, check out
and see Enkoder, which is an OS X app that generates spam protected email addresses. There is also a java version that isn't as complex, but does a similar thing.
Contrary to popular opinion, spam harvesters can translate html and ascii entities usually, and still get so called 'spam protected' addresses. Even basic javascript protectors that just break the address into simple pieces and then prints them on demand can be parsed by spam bots.
THIS is what a spam protected email address looks like! It would probably be possible to implement the application that generates this (enkoder, by
) as a plugin that would truely spam protect the commentor's email addresses.
<script type="text/javascript">
<!--
var d=new Array(
129,178,115,224,149,166,119,214,149,147,
120,115,122,104,135,168,147,211,106,136,
142,171,135,225,112,147,103,209,114,106,
101,145,140,197,129,102,113,218,149,172,
103,219,115,138,135,153,127,150,122,220,
135,123,113,166,140,204,116,212,123,124,
127,141,136,179,108,214,129,105,121,140,
126,208,135,158,102,182,118,212,135,218,
149,102,131,127,129,135,140,157,103,220,
108,170,117,192,125,203,133,204,145,111
);
var t = new Array();
var i=0,ii=0, n=0,nn=0; c=0; while(c<100) {
for (var f0=189; f0<=368; f0++) { i+=f0; n+=f0; if (c>=100) break;
for (var f1=133; f1<=294; f1++) { i+=f1; n+=f1; if (c>=100) break;
if (f1==140) continue;
if ( f1==(n+i) || (n+i)==283 ) continue;
if ( (f1+n-i) == 208 ) break;
for (var f2=113; f2<=230; f2++) { i+=f2; n+=f2; if (c>=100) break;
if ( (f2+n-i) == 157 ) break;
for (var f3=115; f3<=296; f3++) { i+=f3; n+=f3; if (c>=100) break;
if (f3==152) continue;
if ( f3==(n+i) || (n+i)==255 ) continue;
if ( (f3+n-i) == 123 ) break;
for (var f4=141; f4<=277; f4++) { i+=f4; n+=f4; if (c>=100) break;
for (var f5=188; f5<=313; f5++) { i+=f5; n+=f5; if (c>=100) break;
for (var f6=197; f6<=386; f6++) { i+=f6; n+=f6; if (c>=100) break;
if (f6==363) continue;
n%=127; i%=50; ii=i+d[c++]; nn=n+d[c++];nn%=127; ii%=50; t[ii]=nn;
}}}}}}}}
i=0; document.write('<a href="');
while( t[i] ) document.write('&#'+t[i++]+';');
i++; document.write('" title="');
while( t[i] ) document.write('&#'+t[i++]+';');
i++; document.write('">');
while( t[i] ) document.write('&#'+t[i++]+';');
i++; document.write('</a>');
// -->
</script>
<noscript>
<p>JavaScript is required to view this email address
</p></noscript>
That would require a complete implementation of the Java VM for a spambot to parse out, which no known spambots have. Plenty of spam bots have simple regex which lets them parse out html entities and whatnot.