Is it better to use a non-FOSS email and phone number forwarder or to use one of each for everything?

https://www.cloaked.app/

I like to try websites out before tying my identity to them. How do you do it? Simplelogin? I honestly won't manually make a new gmail for every new website I try and I to want the option to see what emails I get.

44 points · 21 comments · view on lemmy.world

21 Comments

earmuff@lemmy.dbzer0.com · 11 pts · 2y (8 replies)

I host my own Simplelogin instance and generate a new address for every service. Combined with Bitwarden, I now have a unique address and password combination for each account.

TheButtonJustSpins@infosec.pub · 6 pts · 2y

I.. did not know you could self host. Well that's neat.

capital@lemmy.world · 5 pts · 2y (6 replies)

I’m still not clear on the value proposition of simplelogin.

I seem to get the same thing with a domain and a catch all address.

Atemu@lemmy.ml · 1 pts · 2y (5 replies)

How do you reply to emails to your catch-all?

capital@lemmy.world · 3 pts · 2y (4 replies)

Hit reply.

This is why I just moved from protonmail to Fastmail. With Fastmail I can send from arbitrary addresses using my domain. Why it’s not that simple with proton is beyond me and now that I’ve tested everything with Fastmail these past few weeks, I see it’s a choice.

I almost signed up for simplelogin but realized I was being sold something that should just be included. Plus setup was convoluted as fuck.

Meanwhile Fastmail is intuitive so far.

earmuff@lemmy.dbzer0.com · 5 pts · 2y (1 reply)

But in some cases you don’t want to use arbitrary addresses, but the exact same that was used to send you an e-mail. For me this is necessary and Simplelogin hides my real e-mail address. Additionally, I can with ease deactivate addresses and minimize spam by a lot.

capital@lemmy.world · 3 pts · 2y

I can reply from ANY address from my domain including the exact one that was used to send me an email.

I can “deactivate addresses” by sending messages to a particular address straight to trash with rules.

Edit: turns out Fastmail has a masked addresses feature built in, separate from a catch-all. It’s basically simplelogin built in, if you want to enable it. Proton is looking more and more overpriced.

random65837@lemmy.world · -1 pts · 2y (1 reply)
[ removed ]
capital@lemmy.world · 1 pts · 2y

If I were a professional spammer, the first thing I’d do to clean the address list I have is to strip out plus addresses. It’s a simple regex.

On how to filter, I can send any address straight to the trash apparently just like simplelogin. I’ll know who sold or leaked my info because it’s in Bitwarden and I can just search my vault to see who I handed that particular address to.

LWD@lemm.ee · 8 pts · 2y (1 reply)

deleted

_s10e@feddit.de · 5 pts · 2y

Which of those work for phone numbers (SMS validation)? Email is easy.

MigratingtoLemmy@lemmy.world · 7 pts · 2y (12 replies)

I'd never use a temp email when I'm paying, considering they have my CC info. For random accounts that I won't check the mail accounts of, temp is great. Not going to trust a company for this.

random65837@lemmy.world · -1 pts · 2y (11 replies)
[ removed ]
MigratingtoLemmy@lemmy.world · 1 pts · 2y (10 replies)

Ah, you'd use Privacy.com? Decent idea I suppose.

random65837@lemmy.world · -1 pts · 2y (9 replies)
[ removed ]
MigratingtoLemmy@lemmy.world · 1 pts · 2y (8 replies)

Do you pay for the premium tier? I would like a decent credit score, and using my card for normal, everyday purchases doesn't bother me as much.

Edit: Well, technically, they have your data anyway. It's like using Paypal for everything. TBH I'm OK with the system as it is right now, but I'd like greater adoption for Monero so I can make purchases directly using that instead of converting it to fiat once again.

random65837@lemmy.world · 1 pts · 2y (7 replies)
[ removed ]
MigratingtoLemmy@lemmy.world · 1 pts · 2y (6 replies)

If they are going to push the transaction to my bank anyway, I'm definitely not trying it. As I said, even PayPal will obscure the buyer's details from the seller. What's the point?

random65837@lemmy.world · 1 pts · 2y
[ removed ]
shasta@lemm.ee · 5 pts · 2y (2 replies)

With gmail if you have an account like example@gmail.com you can then sign up for a website such as netflix with email example+netflix@gmail.com and gmail will forward it to example@gmail.com, but you'll still see the full address on the To line so you'll know where the mail came from. Anything after the + can be whatever you want. This lets you sign up with a different email address for every site you visit without having to create new addresses with gmail. You can also make a filter to hide spam if one of the addresses is compromised.

hh93@lemm.ee · 4 pts · 2y (1 reply)

only works with very simple scripts though - I'd assume that checking for a '+' in front of the '@' and removing everything inbetween is very simple if your goal is to spam everyone from a data-leak

shasta@lemm.ee · 1 pts · 2y

That's very true. I cannot attest to the knowledge and skills of potential spammers. However, more common than data leaks are data selling, and I doubt any company would bother to manipulate the email addresses they buy from others.

TheButtonJustSpins@infosec.pub · 3 pts · 2y

I feel like numbers are much more difficult, aren't they? There are limits to how many there are, and the generally cost money to register. How does generating a unique number per service per user work?