Live data from Hacker News

An Ode to Apple’s Hide My Email

empty.coffee

181–190 of 298 posts

Re: An Ode to Apple’s Hide My Email

#182

Hang on, though: doesn't this essentially hand Apple a big list of which domains you communicate with and how frequently? There's also nothing stopping them reading the emails on the way through. I know a lot of people trust Apple more than Google, but you're essentially signing up for a vendor-locked product that you're hoping Apple will continue to support, with no guarantee they won't collect - even at an aggregat…

If you are already on an @icloud.com address and/or using Apple Mail, what’s the difference?

Re: An Ode to Apple’s Hide My Email

#183

I have a unique email address for every single service that I sign up for, similar to this, though selfhosted. I've been doing this for years and it works wonderfully. If someone misuses my email address, or gets annoying, I can simply turn off the address. Bam! It's the easiest Postfix config in the universe, essentially just: virtual_alias_domains = domain1.com domain2.com virtual_alias_maps = hash:/etc/postfix/vir…

I used to do this too, but it's a considerable amount of effort, and doesn't really prevent much: many domain hoarders/resellers know the trick, so they'll try to match other data they get from you, and sometimes build a fuller "profile" on you than they would if you only had gmail/other generic domain (eg if they have your name, which often leaks along email, they'll try your first name, first name + last name, initial + last name, first name + last initial, etc).

Re: An Ode to Apple’s Hide My Email

#184

    Thanks for using our crappy (app or web site) and Preserve Your Privacy With Apple.

    Please enter your mobile number for account verification. Your number must be capable of receiving SMS messages.

    We need your mobile number in order to verify that we can track you, personally identify you via data brokers, and send you SMS spam and robocalls.

    To help us verify this, please log in using your password and the single-use code we will send you via SMS.

Re: An Ode to Apple’s Hide My Email

#185
For those using this feature for a long enough time, have you seen misfiring or emails that disappear, you couldn't retrieve ?

When using keychain as a password manager, once in a while when creating a password for a new site, it would generate it and complete the account registration, without properly saving the generated password.

I'd hunt for the site item through keychain's list and not find it, and go through the "Reset My Password" for the site, except if time passed I might not even remember which email I used to register.

It was annoying enough for passwords, but not critical. For emails there's probably situations where the account is just lost and the only option is to create a fresh new one. How good is their implementation for this ?

Re: An Ode to Apple’s Hide My Email

#186

Earlier quoted context omitted.

I really really want to like Fastmail too, but it’s also cost me a job interview when the RSVP didn’t go through.

Are your domains set up correctly? That sounds suspiciously like something isn't set up correctly and their client's thought it was spam.

I use an @fastmail domain. The issue was how they handle RSVPs when your default calendar is an external one. RSVPing from within Fastmail attempted to Accept as my old Gmail address, who wasn't invited to the interview. On the interviewers end it looked like I didn't respond.

Re: An Ode to Apple’s Hide My Email

#187

Hang on, though: doesn't this essentially hand Apple a big list of which domains you communicate with and how frequently? There's also nothing stopping them reading the emails on the way through. I know a lot of people trust Apple more than Google, but you're essentially signing up for a vendor-locked product that you're hoping Apple will continue to support, with no guarantee they won't collect - even at an aggregat…

If you use Gmail, there's also nothing stopping them reading the emails on the way through. If you use Outlook, there's also nothing stopping them reading the emails on the way through. If you use Yahoo, there's also nothing stopping them reading the emails on the way through.

If you use virtually any email provider this is true.

Re: An Ode to Apple’s Hide My Email

#188
post #96
post #91

Earlier quoted context omitted.

Mozilla also has Firefox Relay: https://relay.firefox.com/ (Disclosure: I'm on the Relay team.)

If relay gets popular, won’t some services simply start to block relay subdomain for registration to make it ineffective? Just like 10minutesemail etc are blocked in many places.

Sites already have started blocking the mozmail.com domain name. I'm considering moving over to fastmail given that their domain is already established for email purposes. I would imagine the same is true for icloud emails

Re: An Ode to Apple’s Hide My Email

#189

Earlier quoted context omitted.

Email using most large providers is transmitted using TLS

TLS is unaffected by any government laws. What I assume OP is referencing is a law that makes end to end encryption problematic in Australia but Fastmail has never offered end to end encryption. Neither do most email providers so it doesn't matter.

If you get a PGP browser extension they all do. It’s pretty inconvenient to use though, sending encrypted attachments and giving the password offline is probably the only thing most people are up to.

Re: An Ode to Apple’s Hide My Email

#190

Earlier quoted context omitted.

Fastmail seems to be based in Australia unfortunately, so it is not secure

There is nothing secure about email. It's less secure than Telnet. You can email anyone on the internet as anyone and it will be delivered with NO validation. Clients may/may not validate any DKIM signature and the may/may not validate that it actually came from the domain. It's literally the easiest thing on earth to spoof. Email is sent over cleartext, it is not encrypted. Anyone can read email if they can inspect…

>Email is sent over cleartext, it is not encrypted. Anyone can read email if they can inspect packets.

That's obviously false if you bothered to do a bit of searching: https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol#...

>You can email anyone on the internet as anyone and it will be delivered with NO validation. Clients may/may not validate any DKIM signature and the may/may not validate that it actually came from the domain. It's literally the easiest thing on earth to spoof.

That might be true for some systems, but for most services out there, having missing/invalid anti-spoofing measures will result in your mail ending up in spam or not delivered at all.

Post reply on HN