News for hackers. Stuff that matters.
Re:Mozilla VPN by neilparikh on Thursday June 18, 2020 @09:57PM (#23570247)
One thing I'd recommend is making throwaway email addresses using one the domains they own (I think have around a 100). That way, if a spammer gets its, they won't know your domain, and try spamming other username at the domain.
Re:Mozilla VPN by bad_user on Friday June 19, 2020 @01:35AM (#23571313)
I don't think that's a good recommendation.

Spammers are going to find your domain name and spam it at obvious usernames anyway (eg contact@).

Besides what use-case do people have for throwaway addresses? In my experience in most cases the addresses you use aren't throwaway at all.

Fastmail does subdomain aliasing and I've been using that for years with my own domain without issues. Every subscription I have has its own email address. I don't need someone else's domains for that.

Re:Mozilla VPN by neilparikh on Friday June 19, 2020 @02:34AM (#23571642)
I guess "throwaway" is the wrong word. In my case, I created a few emails under Fastmail's domains and then used them to sign up for things like reddit, newsletters etc, where I don't need to tie it to my identity.

I don't think it's a given that spammers will find your domain, if you only provide your email to real people, and give generated emails to online services.

Re:Mozilla VPN by bad_user on Friday June 19, 2020 @03:15AM (#23571906)
If you're going to host anything on that domain, then it will be collected in domain lists. I got rid of my contact@ email address because of that.

Email addresses that I use now look like this: [email protected]

If this leaks, I can track the source and I can bounce messages for this address.

While what you're saying is possible, a spammer needs to target you personally and that's not cost effective. It's not easy for them to try every possible English name at that address, because then they quickly get blacklisted.

Spammers collect addresses via scripts that crawl the web or via data leaks. It's more cost effective for them to get addresses that have been validated. All the spam I get are on these aliased addresses, biggest problem being the one I publish on my website, which I change periodically.

---

I like using my own domain even for aliased addresses because I can change service providers on a whim. I love Fastmail, but if they ever piss me off, I can change to Google Suite or whatever over night, the only thing required is some flexibility in setting up aliases.