3 ms·
Yes. My strategy is to have multiple, disassociated email addresses for each service, not to keep a single address secret. There are a couple of steps to this.
by danShumway 7y ago
Yes.
My strategy is to have multiple, disassociated email addresses for each service, not to keep a single address secret. There are a couple of steps to this.
A) I don't use Gmail. People bring up the + strategy to have multiple emails through Gmail; I don't think that works. I think most spammers will be smart enough to remove the plus, and some sites outright ban it from being part of your address. Treat your Gmail address like you only have one.
B) I do own my own domain(s) and can receive official email there. I use this when I don't care about making my identity known (ie, on a resume, or a publicly facing website, but do want to be able to filter email). The prefix (prefix@domain.com) is the part of my address that matters, and I don't use wildcard prefixes. This means I can generate unique prefixes that I know only some people have access to, which means more public prefixes can get auto-sorted to lower-priority folders (or disabled entirely in the case of a targeted attack) so it's harder for people to spam me.
C) I also make heavy, heavy use of Fastmail's aliases for 3rd-party services. I don't use my own domain(s) to sign up for 3rd-party services, because my domain is a unique identifier that ties all of those accounts together. Fastmail is a shared domain, and lets you generate completely unique addresses, so I can sign up for a Walmart account and give them something like `ilovecats@fastmail.com`. There's no way (I know of) for them to tie that back to another account, so if I start getting spam at that address, I know 100% for sure where it originated from. Every 3rd-party service gets a completely unique email address that can't be associated with my other addresses.
The setup is still evolving, I used to just use Gmail, and I'm still migrating some accounts from Gmail. But I've seen a lot of benefits so far, and I expect to see more benefits as I flesh everything out more.
At the risk of straying into shill territory, I really like Fastmail, a lot. For $5 a month I get really good integration with custom domains, all of the aliases I mentioned above, proper IMAP support, a web interface that is pleasant to use, and my data isn't being mined for advertisers or AI.
Yes, they have the whole Australia problem, but my threat model for email doesn't include the Australian government. I use end-to-end encrypted messaging for that.
- newscracker 7y agoOn Fastmail, you should be cautious never to let your Fastmail domain addresses go (deleting them because of spam). Fastmail and a few other email providers recycle deleted addresses within a few months. If someone else snaps up your address, they could end up getting emails intended for you. I’ve seen companies not having a coordinated system for managing such information. So just changing your address on a company’s website doesn’t necessarily mean that it’s changed in all their internal systems.