3 ms·

> This becomes an email address you truly own, and your email provider cannot hold you hostage anymore. It's hardly yours. Using a custom domain for anything s

> This becomes an email address you truly own, and your email provider cannot hold you hostage anymore. It's hardly yours. Using a custom domain for anything sensitive like banking is not a good idea. Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google.

mynewtb 8y ago
a) 2FA for your bank account b) Who is going through all the trouble to target me specifically with a phishing attempt.
scrollaway 8y ago
> Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google. Please don't spread unsourced FUD. I'm not saying registrars are perfect (although Gandi, which I linked, has an impeccable track record), but everyone uses registrars for their domain name, even the biggest businesses out there. If you have a problem with a particular registrar, I invite you to source it and share it. But the general idea that the potential for a point of attack makes the email "not yours" is nonsensical. What matters is the email address you give out to people. Where that email is stored and ends up doesn't matter. Which registrar owns the domain doesn't matter.
- buzer 8y ago
  > but everyone uses registrars for their domain name, even the biggest businesses out there. Everyone uses registrars, but in some cases you can be your own registrar. Like in Finland, when .fi domain registrations were moved to exclusively to registrars (initially you would register domains with Finnish FCC equivalent, later option was added to let registrar handle that for you and finally it was moved to just registrars), quite a few companies and individuals registered to become registrar for .fi domain.
- heartbreak 8y ago
  I'm not spreading FUD. I'm spreading Maciej Ceglowski's information: https://techsolidarity.org/resources/congressional_howto.html https://techsolidarity.org/resources/congressional_howto.htm... @pinboard has explained on Twitter that registrars can get tricked into letting an attacker into your domain account (of course they can). And from there they can update your zone file to send your mail wherever they want. This isn't about the storage of your email.
  - scrollaway 8y ago
    Even if such an attack were to take place, that doesn't mean you don't "own" your email. You own it far more than an @gmail.com address...

mynewtb 8y ago

a) 2FA for your bank account b) Who is going through all the trouble to target me specifically with a phishing attempt.

scrollaway 8y ago

> Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google. Please don't spread unsourced FUD. I'm not saying registrars are perfect (although Gandi, which I linked, has an impeccable track record), but everyone uses registrars for their domain name, even the biggest businesses out there. If you have a problem with a particular registrar, I invite you to source it and share it. But the general idea that the potential for a point of attack makes the email "not yours" is nonsensical. What matters is the email address you give out to people. Where that email is stored and ends up doesn't matter. Which registrar owns the domain doesn't matter.

buzer 8y ago
> but everyone uses registrars for their domain name, even the biggest businesses out there. Everyone uses registrars, but in some cases you can be your own registrar. Like in Finland, when .fi domain registrations were moved to exclusively to registrars (initially you would register domains with Finnish FCC equivalent, later option was added to let registrar handle that for you and finally it was moved to just registrars), quite a few companies and individuals registered to become registrar for .fi domain.
heartbreak 8y ago
I'm not spreading FUD. I'm spreading Maciej Ceglowski's information: https://techsolidarity.org/resources/congressional_howto.html https://techsolidarity.org/resources/congressional_howto.htm... @pinboard has explained on Twitter that registrars can get tricked into letting an attacker into your domain account (of course they can). And from there they can update your zone file to send your mail wherever they want. This isn't about the storage of your email.
- scrollaway 8y ago
  Even if such an attack were to take place, that doesn't mean you don't "own" your email. You own it far more than an @gmail.com address...