Surprised not to see Apple's Hide My Email mentioned. I was moving towards using my_email+short_company_name@my_domain when it was released.
I found problems with the + syntax occasionally, where I could sign up with that address but wasn't able to log in because their code stripped the + or the + and anything after that.
Now I do 3 levels:
1) use Hide My Email with most companies
2) use me@my_domain with people I want to talk to
3) use my gmail address with Advanced Protection for really important things.
I was going to use my_domain for really important things but it has 2 attack surfaces (registrar and Apple (I use their MX service)) whereas Gmail only has one. And there was an old (2014) article [0] here posted recently about how someone lost their Instagram handle because somebody social engineered GoDaddy into giving the attacker control of the person's domain.
I found problems with the + syntax occasionally, where I could sign up with that address but wasn't able to log in because their code stripped the + or the + and anything after that.
Now I do 3 levels:
1) use Hide My Email with most companies
2) use me@my_domain with people I want to talk to
3) use my gmail address with Advanced Protection for really important things.
I was going to use my_domain for really important things but it has 2 attack surfaces (registrar and Apple (I use their MX service)) whereas Gmail only has one. And there was an old (2014) article [0] here posted recently about how someone lost their Instagram handle because somebody social engineered GoDaddy into giving the attacker control of the person's domain.
[0] https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...