3 ms·
To defend against password stuffing attacks, I use unique passwords per site (saved to password manager, for convenience). Using a unique email address could he
by 8organicbits 5y ago
To defend against password stuffing attacks, I use unique passwords per site (saved to password manager, for convenience). Using a unique email address could help, but I wouldn't trust it. Determined attackers could try your stolen password against a large number of accounts to find where it works.
- lucideer 5y agoHa. No no, I do of course use unique passwords per site. Distinct emails is just defense in-depth. (it also helps a lot with tracing who's sold your data to a spammer)
- logifail 5y agoLet's say your domain name is example.com > Distinct emails is just defense in-depth. > (it also helps a lot with tracing who's sold your data to a spammer) Not only that, if when you first sign up with BigCo you give them your email address as bigco@example.com then when one eventually stops dealing with BigCo one be certain that all email addressed to bigco@example.com can be rejected at your email server without a second thought, no need to scan for spam, just reject everything addressed to that alias. A good friend of mine takes this a step further and does it through DNS (which of course he self-hosts as well as his mail server). He would give his email to BigCo as firstname@bigco.example.com. Once he's done with BigCo then he removes the records for bigco.example.com and there's no way to even look up a relevant mailserver to send email to firstname@bigco.example.com!