The + sign is also valid in an email address. Email servers are supposed to ignore the + and any alphanumerics between the + and the @ characters. For example, if I sign up for a newsletter I might use: myname+somewebsite@gmail.com. Then I can track if "somewebsite" gives my email address to others.
FYI, on my website, in addition to using a regexp, I have lightly hacked Moveable Type to verify that the domain name of a commenter's email address resolves.
--Jim Service (www.hubbo.com)