We're currently using the spamspan module to obfuscate email addresses. This module works so well, that to the casual visitor, all email addresses __seem__ to be non-obfuscated, as they are clickable and readable, however, this is a neat javascript trick you're watching, which the spam bots supposedly can not decode yet. Although I trust the system, wouldn't it be better to show the email addresses as
or something equivalent ? Any other suggestions ?