@dansup @pixelfed Less a usable if there’s a security code as part of it. E.g. notification+unique-code@example.com

Vary the code per notification. Requires inbound setup (DNS) on the instance side.