Live data from Hacker News

How to protect email addresses after domain name expires?

serverfault.com

1–5 of 5 posts

Re: How to protect email addresses after domain name expires?

#2
I'm thinking of creating a website for a friend. This includes registering a domain name and setting up a couple email addresses (myfriend@myfriend.com, etc.)

If the friend doesn't maintain the domain registration, and the domain falls into the hands of a nefarious actor, how can I protect my friends email addresses?

If I'm not mistaken, it is a common tactic to register a defunct domain name and impersonate the associated email addresses.

What can be done to avoid this?

Re: How to protect email addresses after domain name expires?

#3

I'm thinking of creating a website for a friend. This includes registering a domain name and setting up a couple email addresses (myfriend@myfriend.com, etc.) If the friend doesn't maintain the domain registration, and the domain falls into the hands of a nefarious actor, how can I protect my friends email addresses? If I'm not mistaken, it is a common tactic to register a defunct domain name and impersonate the asso…

Maintain the domain registration indefinitely on behalf of your friend. You could register it for ten years and renew it yearly so the risk is always ten years out, and hope that by the time they stop using it, whatever systems they authenticated with it are also defunct within ten years. You could also retain a company like MarkMonitor, which does domain management as part of trademark and other IP management.

But there's no way to control it after it lapses. It's an implicit risk for any system that relies on email for authentication.

Re: How to protect email addresses after domain name expires?

#4
post #3

I'm thinking of creating a website for a friend. This includes registering a domain name and setting up a couple email addresses (myfriend@myfriend.com, etc.) If the friend doesn't maintain the domain registration, and the domain falls into the hands of a nefarious actor, how can I protect my friends email addresses? If I'm not mistaken, it is a common tactic to register a defunct domain name and impersonate the asso…

Maintain the domain registration indefinitely on behalf of your friend. You could register it for ten years and renew it yearly so the risk is always ten years out, and hope that by the time they stop using it, whatever systems they authenticated with it are also defunct within ten years. You could also retain a company like MarkMonitor, which does domain management as part of trademark and other IP management. But t…

Hm. This means that any domain name registered for a friend, client, project, etc. must be registered indefinitely IF a domain email address was used (and said email address is deemed to be "important").

Feels like there is a product offering here...

Re: How to protect email addresses after domain name expires?

#5
post #3

I'm thinking of creating a website for a friend. This includes registering a domain name and setting up a couple email addresses (myfriend@myfriend.com, etc.) If the friend doesn't maintain the domain registration, and the domain falls into the hands of a nefarious actor, how can I protect my friends email addresses? If I'm not mistaken, it is a common tactic to register a defunct domain name and impersonate the asso…

Maintain the domain registration indefinitely on behalf of your friend. You could register it for ten years and renew it yearly so the risk is always ten years out, and hope that by the time they stop using it, whatever systems they authenticated with it are also defunct within ten years. You could also retain a company like MarkMonitor, which does domain management as part of trademark and other IP management. But t…

What if the friendship ends!!