iCloud+ custom email domains should be better

Re:iCloud+ custom email domains should be better by cube00 on Sunday February 27, 2022 @07:10PM (#30494353)

Catch-all addresses are a must have for me now. I allocate unique addresses to every website as these are more robust then using the + operator because they can't be stripped off.

I've already busted one company (I presume selling) my email address to a cloud provider for them to send me marketing material.

I emailed their privacy officer and didn't even get a reply, but that's OK, if it continues, one sieve rule and I can delete any mail that arrives on that address.

I just hope the spammers don't get so advanced they start forging other web sites addresses, maybe I'll have to move to a hashed and salted version that they can't forge.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by mortenlarsen on Sunday February 27, 2022 @07:58PM (#30494774)

I use "-" instead of "+" with a regex: "/^name-.*@mydomain\.tld$/". Then I block them when I get spam after they get compromised. Many spammers already know to remove anything after the +-sign.

But I must admit that the biggest benefit of this setup, was listening to my girlfriend on the the phone explaining to someone, at some company, the reason that their name was part of the email-address:

    "That is because if I get SPAM, I know that I can't trust you."
    ...
    "Just make sure that you don't sell it, or get hacked."
    ...
    "If you are already expecting to get hacked, or sell it... why should I do business with you?"

It was priceless.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by zacwest on Sunday February 27, 2022 @08:28PM (#30495052)

I do something similar, it's been fun journey of issues over the years.

One company gave me a free version of their paid offering because my email address was [email protected], which triggered their "is an employee?" check. (I reported it to a friend who worked there, but they didn't prioritize fixing it. Lasted a while.)

Uber tried to make me change my email address because:

> As much as we appreciate your enthusiasm, and value you as a loyal rider, I do need to ask if you could, please, update your email to something that doesn't use "Uber" in it, as that's technically a trademark violation.

> I apologize for any inconvenience that may cause and thank you for your cooperation. If I can help further with making that change to your email, please let me know.

They backed down, but it was pretty amusing to get this email in response to a totally unrelated one.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by alteria on Monday February 28, 2022 @12:23AM (#30496720)

At least one news website threatened to shut my (expensive) paid account because I was using a "generic" email address, and as such, was likely sharing my credentials.

They insisted I change the email to [email protected], which was enough in their books to prevent credential sharing.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by captn3m0 on Sunday February 27, 2022 @11:27PM (#30496416)

Zomato refused the same to me as well, and I use otamoz@ instead. My Uber email is uber@ though, haven’t had any issues.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by Tea418 on Monday February 28, 2022 @05:15AM (#30498302)

If you’re self-hosting your mail server and if you are using Postfix, changing recipient_delimiter could do the job without regex.

http://www.postfix.org/postconf.5.html#recipient_delimiter

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by exikyut on Monday February 28, 2022 @06:55AM (#30498890)

One minor niggle: I can definitely agree with calling shenanigans if a company doesn't make it clear they have no plans to sell my email address, but honesty about planning to get hacked - from a "this is what we will do" standpoint, but also from a perspective that doesn't flat-out rule out "that will never happen" - is honestly something I would find very refreshing to hear. A lot of environments prioritize mitigating the hypothetical liability risk associated with those kinds of big words rather than communicating that type of boldness that comes across as reassuringly supportive and resilient.

This being said, I wouldn't have minded being a fly on the wall listening to that conversation :P

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by domlaut on Sunday February 27, 2022 @08:09PM (#30494881)

Clever! Are you running your own email server, or is there a provider/relay other than Google that can route based on regexes?

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by mortenlarsen on Sunday February 27, 2022 @08:10PM (#30494884)

My own server, since 2001. Regex part since about 2003. It has been very effective, and still is.

The most effective thing back in the day was blocking based on TCP fingerprint, as "Windows XP" was different from "Windows 2003" IIRC (with OpenBSD PF). After that, greylisting gave me a few SPAM-free years, before it became the norm (OpenBSD spamd). Many OpenBSD users had quite a few SPAM-free years back then.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by exikyut on Monday February 28, 2022 @06:57AM (#30498903)

<Insert standard "how are you not being blocked by everyone?!?!" here>

(Genuinely curious - particularly with M$)

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by iRomain on Tuesday March 01, 2022 @06:21AM (#30512755)

The OSS https://forwardemail.net can route based on regex

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by gommm on Monday February 28, 2022 @03:19AM (#30497593)

Because spammers know to remove anything after + or - sign, I've set up an arbitrary sequence of letters so gommmm iai + anything I want will root to gommmm@

I've CS question why I used their company email in my email address and it was fun!

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by noja on Monday February 28, 2022 @01:27AM (#30496976)

> I've already busted one company (I presume selling) my email address to a cloud provider for them to send me marketing material.

Are you using a salt or something along with the company name? Or could we guess the e-mail address for a given company?

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by voisin on Sunday February 27, 2022 @07:21PM (#30494459)

Why not use iCloud’s private email feature to generate a new email that forwards to your regular email for these purposes?

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by 7steps2much on Sunday February 27, 2022 @07:27PM (#30494524)

Just my personal opinion, but the reason I got a domain to start with was to not be dependent on a specific provider.

Also, it's is far nicer to be able to simply sign up to a website with [email protected] than go generate a random email. Especially if you are on another device.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by M5x7wI3CmbEem10 on Sunday February 27, 2022 @10:56PM (#30496246)

doesn't this lock you in with the domain provider? google domains or whatever you use

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by neoromantique on Sunday February 27, 2022 @11:13PM (#30496344)

You can migrate your domain to a different registrar

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by encryptluks2 on Monday February 28, 2022 @03:03AM (#30497503)

Using a custom domain is precisely to prevent lockin that you are getting with many of these alias providers. If you don't own the domain then you can't migrate to a different provider.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by Gareth321 on Monday February 28, 2022 @03:48AM (#30497773)

If you ever migrate away from iCloud, you lose all of those custom addresses. Using even one immediately locks you into iCloud for life. This is a sobering prospect in our age of "one wrong word and we'll ban you from our service."

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by domlaut on Sunday February 27, 2022 @08:07PM (#30494869)

I use an email like this for our ISP at home -- one time I was asked what the email on the account was. Much easier to remember and dictate something like [email protected] than one of Apple's "Hide my email" emails.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by encryptluks2 on Monday February 28, 2022 @03:05AM (#30497512)

It sounds great in practice, but unless you are using something psuedorandom, then I can already guess you may have a domain at [email protected] or [email protected]. It may be convenient but certainly takes away some of the work if someone wants to target you.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by crossroadsguy on Monday February 28, 2022 @02:36AM (#30497345)

No, that’s losing control. Though it’d me nice to have more email providers who support this like Fastmail does (inside their mail client iirc), or even better the way iCloud private mail seems to be doing or duck.com I’ve heard probably does. Though I doubt my provider mailbox.org will even try to do it.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by nsomaru on Monday February 28, 2022 @12:50AM (#30496830)

How are you hosting email, would you mind sharing your setup?

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by Razengan on Monday February 28, 2022 @12:15AM (#30496682)

> I've already busted one company (I presume selling) my email address to a cloud provider for them to send me marketing material.

Who? So we can avoid them.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by btmiller on Monday February 28, 2022 @01:16AM (#30496923)

So far for me: - Drizly - Stub Hub - Trustmark

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by Tepix on Monday February 28, 2022 @12:38AM (#30496781)

For me, that latest company to have apparently sold my email address was UploadVR.

[ Parent | on HN ]

Re:iCloud+ custom email domains should be better by encryptluks2 on Monday February 28, 2022 @03:01AM (#30497487)

I've detected an Xfinity data breach using custom aliases, but so far Xfinity refused to acknowledge anything.

[ Parent | on HN ]