blame.email VS SimpleLogin

https://blame.email/ is a website that does this. I wrote a Lua checker for rspamd that bypasses the spam filter if the address is "signed". I also have a bookmarklet that generates a signed address and inserts it into the current text field.

While it doesn't stop spam, I have been using a catch-all email system for a while now.

The benefit is that I know where someone got my email from, and I can then try to figure out whether the place has been compromised, or whether they're selling my email, etc. And I can just blacklist that particular address forever as well.

Previously, I just did [email protected], but I've switched to something similar to blame.email [1].

This makes my emails look a little weirder, but it has stopped the weird looks I'd get when walking into a physical place, like my doctor, and telling them "Yeah, email me at @.com".

It also makes it less obvious that its effectively a throwaway email, particularly combined with my domain; it looks fitting. And since each address is salted and hashed, it pretty much eliminates the risk of someone successfullying trying to phish me by sending me an email to something like `[email protected]`.

Lastly, on my HN profile and elsewhere, I've got my "email", but despite them being unique, I still don't want to have to rotate it if it gets picked up by a spambot, so I've tried to do some plaintext simple "obfuscation" like in the article.

I went for

~АТ~ . -- with the "AT" being Cyrillic rather than Latin - I figure at least some will get tripped up by not being able to use purely English regex.

So far, I have yet to receive any spam with that strategy. Maybe I'm lucky or just not getting indexed, or maybe it's working a little.

[1]: https://news.ycombinator.com/item?id=31820502 / https://blame.email/

Just tossing this here for reference: https://blame.email/

id love to potentially also see something like https://blame.email/ implemented as an option for the above 2, so you can always work out the source.

Next time I ping you I'll have it fully implemented at https://blame.email :)

>Email aliases, mailing lists, subaddressing and catch-all addresses support.

Another feature that would be nice to have built-in is masked hide-my-email aliases for privacy like the cloaked email services from iCloud, FastMail, SimpleLogin, Cloudflare email routing, etc.[1]

For now, I use the typical aliases addresses in Dovecot but it doesn't hide the real email when replying. Also, creating new aliases in Dovecot-based email systems is very tedious and cumbersome because you have to go through the cPanel interface to create new aliases. (Some suggest using "catchall" to simplify manual creation of new aliases but that's not workable when spam robots constantly send to new random addresses in your domain.) The cPanel/Dovecot aliases also don't have metadata so you can add details on what the alias is for and when it was created.

[1] masked email services

https://support.apple.com/en-us/105078

https://www.fastmail.help/hc/en-us/articles/4406536368911-Ma...

https://simplelogin.io/

https://blog.cloudflare.com/introducing-email-routing

Note that other than Mozilla’s Firefox Relay and Apple’s Hide My Email there's also SimpleLogin: https://simplelogin.io/

Also the Bitwarden password manager has an integration for SimpleLogin.

Have you reported it here? https://github.com/simple-login/app/issues

To accomplish this, first create a SimpleLogin acct by logging in with Proton. Once thats done go to https://app.simplelogin.io/developer and create a website. Give it your authentik URL.

Yes, you can also use aliases with your 10 accounts for unlimited addresses and to conceal real addresses. https://simplelogin.io (or apps for iOS/Droid). Owned by proton. Use your proton credentials to login… simple login is included with some plans.

I know about https://simplelogin.io/ and as far as I know it is used under the hood by ProtonMail to implement the functionality.