Live data from Hacker News

Ask HN: Good email host?

news.ycombinator.com

51–60 of 71 posts

Re: Ask HN: Good email host?

#52
post #13

Be careful with using your own domain, there have recently been a number of high-profile attacks based on hijacking the DNS.

I haven't heard about those. Do you have a link to a web page that explains more? The reason I'd prefer my own domain is quite simply that I'd like to avoid being locked into a specific email company.

I've read a number of stories on the topic - the basic technique is to identify the domain registrar or DNS provider and attempt to manually reset the password by spear-phishing with the customer service rep. Once you're in, MX can be redirected to a host of the attacker's choice, and then you can initiate password resets on any number of third-party services.

One example of a DNS-based MX hijack is http://arstechnica.com/security/2015/02/attackers-take-contr... although i'm at a loss to come up with some more specific (and exciting!) examples that i can clearly remember.

It's a vulnerability that simply doesn't exist with gmail/hotmail/outlook.com addresses. Do you know whether your domain registrar and DNS providers' CSRs mandate 2FA or allow multiple attempts at guessing security questions?

EDIT: https://medium.com/@N/how-i-lost-my-50-000-twitter-username-... used the same attack.

Re: Ask HN: Good email host?

#53
post #38
post #34

Earlier quoted context omitted.

> Self-hosting option came out to one Linode machine, plus one other VPS provider machine So, that’s what “self-hosting” means nowadays? Because of course we can’t have these infernal machines in our homes ; what are we, savages , to sully our hands with manual labor and physical hardware ? /s Note: Your home is the only place where you can host your server and be reasonably sure that the government is at least going…

I understand that, but unfortunately my provider at home is blocking port 25 (both directions), so that's not an option.

Use a home machine then tunnel to one VPS for an endpoint. Saves one box.

Re: Ask HN: Good email host?

#54
fastmail - Been using their service for couple of years. Here is how I migrated from yahoo and gmail.

1. Bought fastmail service and a personal domain. 2. Import yahoo and gmail email (they warn you to use it as onetime service and not as backup). 3. Autoforward all my gmail and yahoo to my fastmail. 4. As you get emails, you can make decision of unsubscribing/changing email addresses of various services.

Re: Ask HN: Good email host?

#56
post #20

Can you elaborate on your privacy concerns with Gmail? Google Gsuite (formerly apps for work) has some fairly strict privacy controls. https://gsuite.google.com/learn-more/how_google_protects_you...

Google Apps is too expensive for a single user, and Gmail collects my personal data.

Re: Ask HN: Good email host?

#57
post #30

I recently had this exact question. I finally decided on Pawnmail ( https://pawnmail.com/ ). It's free and you get 2 GB. I was worried whether it'd randomly shut down, so I emailed the creator, http://pastebin.com/raw/eWG8RQqk , and it looks like it'll be safe for a while. I have no idea whether using services like these is a good idea.

"Pawnmail currently has enough funds to support 221 more days of hosting." It seems to be a free project (getting money from donations) run by a single person. No, thanks :)

Re: Ask HN: Good email host?

#58
post #43

I'm currently using FastMail and I would need to have a huge money issue in order to stop using it. The main thing I like is the possibility to use "alias", which basically allows me to have different e-mails for each service I'm using. Coupling that to the fact that they support catch all adresses and I rated them best email service forever. The only thing misssing would be an automation from specific e mail alias t…

You should be able to just create a folder that matches the name of the alias and it just works (assuming you turn on wildcard aliases). Incidentally this opens up an odd vulnerability that allows people to effectively store email directly in your drafts folder. Add to this the ability to blacklist any email address that ends up on a spam list (using a disabled alias) and you're pretty much spam free.

Re: Ask HN: Good email host?

#59
I can highly recommend https://mailbox.org/en/ . Based in Germany, complying to German data privacy laws. The smallest package is 1€/month with 2 GB storage for e-mails, 3 aliases, POP3/IMAP, calendar, address book, tasks. There are also options for anonymous registration and payment. They also have encryption built in: you can do PGP encryption in the webinterface. It also shows you whether there is working transport encryption (SMTP with TLS/STARTTLS) for each addressee. This might sound like a marketing post but i am a highly satisfied customer and really like the service. I have catch-all addresses for +5 domains ("Office package") and everything works like a charm.

Edit: changed currency

Post reply on HN