Biggest lesson I learned here: Long-lived TTLs for MX records seem ideal to prevent an custom-domain email takeover. The bigger risk these days is how easy it

Biggest lesson I learned here: Long-lived TTLs for MX records seem ideal to prevent an custom-domain email takeover. The bigger risk these days is how easy it is to lose your phone number, which seems to be the trendy way to break into accounts. Using Google Voice for SMS 2FA seems like an OK workaround until companies get a clue that phone numbers are barely tied to their user if access to the user's account is desired. Welp, I wish Cloudflare would add Yubikey support now too to make it easier to lock down account.