Sorry, I had responded without logging in first. I was pretty sure that this (allowing spaces) was intentional on the part of the programmer. My only concern was whther the 'space' was safe enough.
If I type a space (before or after the @) in the To field of a gmail 'compose' form, it gives me:
Some addresses in the "To" field were not recognized. Please make sure that all addresses are properly formed.