News for hackers. Stuff that matters.
Re:Show HN: An ad free temporary mail service by TemporaryMail on Sunday July 21, 2024 @09:30AM (#41024938)
Thanks for the advice and I'll look into supporting email forwarding, but I'm not sure why users would need PGP.
Re:Show HN: An ad free temporary mail service by WiF3cap7ShUth4 on Monday July 22, 2024 @11:03AM (#41035277)
You can look at this https://sequoia-pgp.org/blog/2021/06/29/202106-yes-we-want-c...

I quote a section that corresponds to my situation

>Email is everyone’s primary trust anchor online

>If a user loses access to an online account, most services have an account recovery mechanism that will let the user back in. Usually, this works by sending an email to the user with a one-time password.

>If an attacker compromises a user’s email account, they can use the same mechanism to gain control of the user’s account on any service that uses the email account as a trust root. In practice, that’s most of the user’s online accounts. Unfortunately, two-factor authentication only offers limited protection. It is opt-in and usually uses a phone number, which is easily hijacked.

>If account recovery emails were encrypted, the trust anchor would instead be the encryption key. Since the encryption key is stored on the user’s computer, this would defeat this type of attack.

Re:Show HN: An ad free temporary mail service by TemporaryMail on Monday July 22, 2024 @05:00PM (#41039757)
Can you give me an example of who would be sending you emails with PGP though to your disposable email address and why?
Re:Show HN: An ad free temporary mail service by WiF3cap7ShUth4 on Tuesday July 23, 2024 @11:25AM (#41046964)
I'm not referring about throwaway emails. I'm merely referring to email aliases.

Nobody will send PGP encrypted email to an alias email address. The email alias will route emails using PGP to your inbox.

> Sender (without PGP) -> Alias (with PGP) -> mailbox

Re:Show HN: An ad free temporary mail service by TemporaryMail on Thursday July 25, 2024 @06:05PM (#41073875)
Got it, that makes more sense and could actually make your inbox more private as the email provider won't be able to snoop into your emails to gather data to "make your ads more personalized".

I'll look into this now that it makes more sense, thanks for the advice!