News for hackers. Stuff that matters.
Re:Email addresses are not good 'permanent' identifiers for ... by renonce on Sunday December 31, 2023 @12:47PM (#38825905)
What about domain names? Emails are bound to a domain name by definition, and indeed domain name IS designed as a good identity and can be used to host an email. See how domain names are owned by large corporations and trusted since day one and never lost, as long as you keep it carefully. It requires WHOIS information as the authoritative information of domain owner. An account based on username and password is what you usually need to access it, but if you are serious you can always choose a domain registar that is serious about keeping your domain name. It’s not free but it costs nuts compared to the cost of losing it, and let’s not forget that there is a cost behind hosting emails even if it’s given for free.
Re:Email addresses are not good 'permanent' identifiers for ... by talldatethrow on Sunday December 31, 2023 @12:50PM (#38825942)
I set up a Twitter account long ago with an email from a domain I used. I let the domain expire later, and now can't do the password reset because it's pointing to a domain that I don't own, and can't buy anymore. Basically lost forever.
Re:Email addresses are not good 'permanent' identifiers for ... by earthling8118 on Sunday December 31, 2023 @01:36PM (#38826320)
This happened to my primary Google account once and only by sheer luck was the domain available and I was able to recover the account.

I'm the only one to blame because I changed my password at 2 in the morning when notified that someone in another country used it. I didn't put my info into a password manager or remember it because I wasn't truly awake at the time.

When recovering I had to go through a bunch of steps and did great up until the email one. Well, Google was firm about wanting access to that email. Odd, considering the domain wasn't registered at the time of requesting a password reset and so I would consider it a security violation to accept that.

Needless to say, I am much more stringent on making sure this stuff is set up correctly now.

Re:Email addresses are not good 'permanent' identifiers for ... by renonce on Sunday December 31, 2023 @12:55PM (#38825978)
You can buy a domain 10 years at a time. If you forgot to renew it one year ahead, the domain probably wasn’t important enough for you.
Re:Email addresses are not good 'permanent' identifiers for ... by talldatethrow on Sunday December 31, 2023 @12:56PM (#38825996)
Correct it was not. I let it expire. I forgot the Twitter account was registered with it. Later when I needed to relogin and couldn't remember the password, I couldn't do a password reset.