Hacker News new | past | comments | ask | show | jobs | submit login

Surprised not to see Apple's Hide My Email mentioned. I was moving towards using my_email+short_company_name@my_domain when it was released.

I found problems with the + syntax occasionally, where I could sign up with that address but wasn't able to log in because their code stripped the + or the + and anything after that.

Now I do 3 levels:

1) use Hide My Email with most companies

2) use me@my_domain with people I want to talk to

3) use my gmail address with Advanced Protection for really important things.

I was going to use my_domain for really important things but it has 2 attack surfaces (registrar and Apple (I use their MX service)) whereas Gmail only has one. And there was an old (2014) article [0] here posted recently about how someone lost their Instagram handle because somebody social engineered GoDaddy into giving the attacker control of the person's domain.

[0] https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...




Consider applying for YC's Summer 2025 batch! Applications are open till May 13

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: