blame.email VS maddy

https://blame.email/ is a website that does this. I wrote a Lua checker for rspamd that bypasses the spam filter if the address is "signed". I also have a bookmarklet that generates a signed address and inserts it into the current text field.

While it doesn't stop spam, I have been using a catch-all email system for a while now.

The benefit is that I know where someone got my email from, and I can then try to figure out whether the place has been compromised, or whether they're selling my email, etc. And I can just blacklist that particular address forever as well.

Previously, I just did [email protected], but I've switched to something similar to blame.email [1].

This makes my emails look a little weirder, but it has stopped the weird looks I'd get when walking into a physical place, like my doctor, and telling them "Yeah, email me at @.com".

It also makes it less obvious that its effectively a throwaway email, particularly combined with my domain; it looks fitting. And since each address is salted and hashed, it pretty much eliminates the risk of someone successfullying trying to phish me by sending me an email to something like `[email protected]`.

Lastly, on my HN profile and elsewhere, I've got my "email", but despite them being unique, I still don't want to have to rotate it if it gets picked up by a spambot, so I've tried to do some plaintext simple "obfuscation" like in the article.

I went for

~АТ~ . -- with the "AT" being Cyrillic rather than Latin - I figure at least some will get tripped up by not being able to use purely English regex.

So far, I have yet to receive any spam with that strategy. Maybe I'm lucky or just not getting indexed, or maybe it's working a little.

[1]: https://news.ycombinator.com/item?id=31820502 / https://blame.email/

Just tossing this here for reference: https://blame.email/

id love to potentially also see something like https://blame.email/ implemented as an option for the above 2, so you can always work out the source.

Next time I ping you I'll have it fully implemented at https://blame.email :)

It's interesting how there is now

* Maddy: https://github.com/foxcpp/maddy

* Mox: https://github.com/mjl-/mox

* and Stalwart

which all see to aim for more or less the same niche. I wonder if we'll see two of those merge eventually.

Does anybody run maddy (https://github.com/foxcpp/maddy) in production or for personal matters?

Yeah, that's a bummer. If you need the docs, then its here.

I've been using maddy mail server as it's quick and easy to setup for over a year now

Both my home server and VPS have unattended upgrades with email notifications about faliures that override do not disturb on my phone. acme.sh has automatic TLS renewal configured with systemd. Maddy mail server itself runs on Docker that is also set up with systemd to automatically restart and start at reboots. When it comes to updating Maddy i just keep an eye on the release Atom feed and change the docker compose file and restart the container.

I wonder how does it compare to Maddy mail server: https://github.com/foxcpp/maddy

If you want to self hosted, I strongly recomend https://github.com/foxcpp/maddy since it's just a single binary to run.

If you still want to do it on your own, there is Go simple mail server - maddy where you can borrow some code or simply use it for the purpose as a IMAP server (I mentioned above, but dovecot as IMAP probably would be the best)

https://github.com/emersion has great libraries related to emails, for example go-imap. https://github.com/foxcpp/maddy is an email server written in Go that you could look into.

Check ready-to-go maddy-SMTP/IMAP server