91–96 of 96 posts
Earlier quoted context omitted.
That's another way yes and I've actually seen another site do this, but I wasn't able to find it in my browser history.
Maybe you are referring to https://www.emailnator.com/ , it utilized that trick
Earlier quoted context omitted.
If I'm not misunderstanding you, the same should go for aliases as they will be flagged as disposable addresses as well. I also noticed that Addy allows users to send emails through it, which is a risky process as it requires close monitoring so spam isn't sent out through the service. I will take a closer look at this and see if it's possible to improve it in some way. Thanks for the kind words also and the same to…
Simple Login (SL), Addy (AD), and DuckDuckGo Email Protection (DDG) are the 3 alias email services I use. Both SL and AD can send and receive. DDG only receives. You can disable the sending direction and simply allow the forward service to run. I believe you will be able to handle this technological challenge. SL and AD are free for 10 aliases, but AD also includes PGP in the free tier. DDG allows for unlimited alias…
Earlier quoted context omitted.
Simple Login (SL), Addy (AD), and DuckDuckGo Email Protection (DDG) are the 3 alias email services I use. Both SL and AD can send and receive. DDG only receives. You can disable the sending direction and simply allow the forward service to run. I believe you will be able to handle this technological challenge. SL and AD are free for 10 aliases, but AD also includes PGP in the free tier. DDG allows for unlimited alias…
Thanks for the advice and I'll look into supporting email forwarding, but I'm not sure why users would need PGP.
I quote a section that corresponds to my situation
>Email is everyone’s primary trust anchor online
>If a user loses access to an online account, most services have an account recovery mechanism that will let the user back in. Usually, this works by sending an email to the user with a one-time password.
>If an attacker compromises a user’s email account, they can use the same mechanism to gain control of the user’s account on any service that uses the email account as a trust root. In practice, that’s most of the user’s online accounts. Unfortunately, two-factor authentication only offers limited protection. It is opt-in and usually uses a phone number, which is easily hijacked.
>If account recovery emails were encrypted, the trust anchor would instead be the encryption key. Since the encryption key is stored on the user’s computer, this would defeat this type of attack.
Earlier quoted context omitted.
Thanks for the advice and I'll look into supporting email forwarding, but I'm not sure why users would need PGP.
You can look at this https://sequoia-pgp.org/blog/2021/06/29/202106-yes-we-want-c... I quote a section that corresponds to my situation >Email is everyone’s primary trust anchor online >If a user loses access to an online account, most services have an account recovery mechanism that will let the user back in. Usually, this works by sending an email to the user with a one-time password. >If an attacker compromises a…
Earlier quoted context omitted.
You can look at this https://sequoia-pgp.org/blog/2021/06/29/202106-yes-we-want-c... I quote a section that corresponds to my situation >Email is everyone’s primary trust anchor online >If a user loses access to an online account, most services have an account recovery mechanism that will let the user back in. Usually, this works by sending an email to the user with a one-time password. >If an attacker compromises a…
Can you give me an example of who would be sending you emails with PGP though to your disposable email address and why?
Nobody will send PGP encrypted email to an alias email address. The email alias will route emails using PGP to your inbox.
> Sender (without PGP) -> Alias (with PGP) -> mailbox
Earlier quoted context omitted.
Can you give me an example of who would be sending you emails with PGP though to your disposable email address and why?
I'm not referring about throwaway emails. I'm merely referring to email aliases. Nobody will send PGP encrypted email to an alias email address. The email alias will route emails using PGP to your inbox. > Sender (without PGP) -> Alias (with PGP) -> mailbox
I'll look into this now that it makes more sense, thanks for the advice!