Show HN: NBox – Sign up anywhere without giving your email address

Re:Show HN: NBox – Sign up anywhere without giving your emai... by chatmasta on Tuesday June 20, 2017 @03:35PM (#14597787)

If you do this, make sure you lock down your account at your domain registrar. A socially engineered DNS hijack could be all it takes to obtain full read/write access to your email.

[ Parent | on HN ]

Re:Show HN: NBox – Sign up anywhere without giving your emai... by SippinLean on Tuesday June 20, 2017 @03:45PM (#14597881)

Can you elaborate on the steps needed to ensure your security in this case?

[ Parent | on HN ]

Re:Show HN: NBox – Sign up anywhere without giving your emai... by ryanlol on Tuesday June 20, 2017 @04:49PM (#14598492)

Spend a decent chunk of money to become a registrar yourself or go with MarkMonitor.

I suppose google domains might be OK for personal email.

[ Parent | on HN ]

Re:Show HN: NBox – Sign up anywhere without giving your emai... by threatofrain on Tuesday June 20, 2017 @05:11PM (#14598653)

Would you mind elaborating? Do you mean socially tricking a GoDaddy or other domain registrar employee into changing DNS records?

[ Parent | on HN ]

Re:Show HN: NBox – Sign up anywhere without giving your emai... by sverige on Tuesday June 20, 2017 @05:09PM (#14598629)

The other thing that happens is spammers use your domain to spam others. That catch-all will work for systems that test email validity for the spammer's made-up address on the From line.

[ Parent | on HN ]