Started to move off Google's services to proton:
this post was submitted on 31 Dec 2023
100 points (91.7% liked)
Selfhosted
40149 readers
544 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you have Proton Premium point your domain to SimpleLogin and use it. Its included with Proton Premium. Its helped me root out 2 places so far that have sold my email address or were compromised and failed to disclosure.
i also use proton, but i just use a custom address with every unique vendor/account. i know almost immediately who sold my address. it also prevents hacked systems from matching addresses in other systems.
For anyone who wants to do this easily: afaik (ymmv) most mail systems will accept aliases to your account if you put a + after your email username. for example, if you're foo@example.com, then foo+bar@example.com would still route to your inbox but you'd be able to see that it was sent to a different address than your own. i do this for any email i put into a website I don't trust (which is most) and if you use the company name it's a really easy way to see who sold your data
For a spammer it literally takes less than ten seconds to clean a list of one million addresses from "plus addresses" and get back the original one without the source. Only amateur spammers use raw lists without any sanitization
Just be aware that it’s not guaranteed - I’ve had services remove everything after the ‘+something’ on my email address. Some will also not see that as a valid email address, depending on how they do their input validation.
Yes that's what SimpleLogin does and its part of the Proton umbrella. You can use your own custom domain or a SimpleLogin domain to create email addresses. It also enables you to send from the custom addresses so the end user never learns your true email address. SimpleLogin also has mobile apps so you can create addresses very easily.
yeah, its like what i do, but with more steps. i guess it makes reply addressing slightly easier, but ive found i rarely need send to most of my vendor addressing
Serious question, why SimpleLogin vs Proton aliases?
You cannot turn off the proton aliases, one of my aliases (those with +) got compromised and I’m still getting phishing emails on that one. You can create a rule for that mail but you cannot completely disable it. There is also Proton Pass which does the same as SimpleLogin and also stores Passwords. You should check it out as well.
Ahh, okay, that makes some sense. Thanks!
What do you mean? Of course you can.
if youre running a full domain, you dont even need to manually create alias' unless you need to reply/send as.
i've found i rarely need to do that, so you can literally just use an email address literally off the top of your head, have it all forwarded to a catch all and youre done. none of this extra service stuff. again, unless you require 'send as/aliasing'.
Yeah, my bad, that's what I do - so I just wasn't sure what the benefit of SimpleLogin was...fully open to admit maybe I'm missing something though.
I basically create an email alias for every service I use and when leaks happen I know exactly who the offender is - which is nice...I guess.
I've caught a couple but they weren't subtle about it at all. I got an email from Norton antivirus that referenced the seller directly. No shame.