Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Yahoo makes it difficult to leave its service by disabling email forwarding

techcrunch.com

Post reply on HN
Print view View original

51–60 of 82 posts

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#51

Post by Waterluvian »

ocdtrekkie wrote: post #38
MisterWalter wrote: post #36

I worked at a school helpdesk for a while, and I saw that whenever school email accounts were hacked, the attackers would set up forwarding to some other account. People wouldn't notice the forwarding for weeks or longer, and would only come in to us by chance. In the meantime, a lot of information could be siphoned off. There could be some legitimate security concerns there, especially since most yahoo accounts don'…

There is a very easy solution to this, which I believe Gmail employs: Place a very noticeable banner on the inbox when all your email is being forwarded to another address.

Should just auto reset forwarding when a password reset is done.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#52

Post by Waterluvian »

ocdtrekkie wrote: post #38
MisterWalter wrote: post #36

I worked at a school helpdesk for a while, and I saw that whenever school email accounts were hacked, the attackers would set up forwarding to some other account. People wouldn't notice the forwarding for weeks or longer, and would only come in to us by chance. In the meantime, a lot of information could be siphoned off. There could be some legitimate security concerns there, especially since most yahoo accounts don'…

There is a very easy solution to this, which I believe Gmail employs: Place a very noticeable banner on the inbox when all your email is being forwarded to another address.

Should just auto reset forwarding when a password reset is done.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#53

Post by Vanit »

honkhonkpants wrote: post #27
hollander wrote: post #21

Earlier quoted context omitted.

If you can manage DNS yourself, you can set MX to Google or another provider.

Well yes, but you can't just expect Google to accept mail for any old domain. You have to be a Google customer first.

Its very popular to use Zoho as a workaround for this.

(1) Point your MX records at your Zoho mail

(2) Forward all mail from Zoho to your personal gmail account

(3) Setup a sender alias in your gmail account for your domain

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#54

Post by Vanit »

SXX wrote: post #47
hollander wrote: post #22

Earlier quoted context omitted.

You can keep registration at your preferred provider, and set DNS for MX to Google, and there you go.

Can you please explain how exactly this going to work without Google Apps? Am I missing something?

Yeah, you're missing the bit where you use a 3rd party to send/receive the email as a proxy for your personal gmail account, i.e. using Zoho.

(1) Point your MX records at your Zoho mail

(2) Forward all mail from Zoho to your personal gmail account

(3) Setup a sender alias in your gmail account for your domain

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#55

Post by revicon »

Vanit wrote: post #53
honkhonkpants wrote: post #27

Earlier quoted context omitted.

Well yes, but you can't just expect Google to accept mail for any old domain. You have to be a Google customer first.

Its very popular to use Zoho as a workaround for this. (1) Point your MX records at your Zoho mail (2) Forward all mail from Zoho to your personal gmail account (3) Setup a sender alias in your gmail account for your domain

Can you still do SPF and DKIM?

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#56

Post by honkhonkpants »

revicon wrote: post #55
Vanit wrote: post #53

Earlier quoted context omitted.

Its very popular to use Zoho as a workaround for this. (1) Point your MX records at your Zoho mail (2) Forward all mail from Zoho to your personal gmail account (3) Setup a sender alias in your gmail account for your domain

Can you still do SPF and DKIM?

No and that's the problem. Gmail sees your IPs instead of the originating IPs, with a negative impact on spam classification quality, and in all likelihood a negative impact on your IP reputation due to the appearance of relaying spam.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#57

Post by Vanit »

honkhonkpants wrote: post #56
revicon wrote: post #55

Earlier quoted context omitted.

Can you still do SPF and DKIM?

No and that's the problem. Gmail sees your IPs instead of the originating IPs, with a negative impact on spam classification quality, and in all likelihood a negative impact on your IP reputation due to the appearance of relaying spam.

Curious if you've encountered this problem or if its hypothetical (not to take away from your comment, it makes sense). I've had Zoho->Gmail setup for a while and I've had no issues with false positives/negatives.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#58

Post by dpc_pw »

kstrauser wrote: post #26
oridecon wrote: post #25

Just be careful about "deleting" your Yahoo account. > Register a previously used ID > A deleted Yahoo account ID may become available for future use, and you’re welcome to try to register it. However, Yahoo can't specify how long until a deleted ID may become available, and we can't guarantee that it will become available. https://help.yahoo.com/kb/SLN3060.html And make sure it doesn't get removed for inactivity: >…

I came here to say this. You probably don't have old, forgotten accounts laying around with your Yahoo email address tied to them, but if you do, Yahoo reserves the right to hand over your password reset abilities to the next person who wants your username. DON'T DELETE YOUR YAHOO ACCOUNT. Purge it of all content, sure, but flat-out deleting it is very risky.

I guess setting auto-reply with "I don't use this account anymore, please contact me via (either email or a link)." would do the job quite well.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#59

Post by kstrauser »

dpc_pw wrote: post #58
kstrauser wrote: post #26

Earlier quoted context omitted.

I came here to say this. You probably don't have old, forgotten accounts laying around with your Yahoo email address tied to them, but if you do, Yahoo reserves the right to hand over your password reset abilities to the next person who wants your username. DON'T DELETE YOUR YAHOO ACCOUNT. Purge it of all content, sure, but flat-out deleting it is very risky.

I guess setting auto-reply with "I don't use this account anymore, please contact me via (either email or a link)." would do the job quite well.

That seems reasonable. I also went through my contacts, calendar, etc. to make sure they were wiped clean.

Re: Yahoo makes it difficult to leave its service by disabling email forwarding

#60

Post by SXX »

Vanit wrote: post #54
SXX wrote: post #47

Earlier quoted context omitted.

Can you please explain how exactly this going to work without Google Apps? Am I missing something?

Yeah, you're missing the bit where you use a 3rd party to send/receive the email as a proxy for your personal gmail account, i.e. using Zoho. (1) Point your MX records at your Zoho mail (2) Forward all mail from Zoho to your personal gmail account (3) Setup a sender alias in your gmail account for your domain

This is way I using gmail now, but that is kind a opposite to statement in message I replied to: "set DNS for MX to Google".

Currently I have to redirect to Google and Google only send from those boxes using 3rd party SMTP server. So main advantage of having trusted sender is not there.

Post reply on HN