Own domain and email security

beddo

I don't use catch alls. What's the point in receiving email to an address they you never use?

What I do have is a core mailbox somethingrandom@mydomain which I never, ever give out. I then set up a forwarder for me@mydomain to that core mailbox. When signing up for a website I can use a dedicated email address, for example bbc@mydomain. If I start receiving spam, I can see which email it went to and know exactly which website has been naughty with my details.

I did have it on my company servers where I ran a very good spam filtering service but issues within the company made me move it out of their control. Spam filtering isn't as good now but still alright.

coffear

HonourlessWeasel wrote: »

But do create an SPF record to prevent your email address from being used illicitly to send spam.
https://en.wikipedia.org/wiki/Sender_Policy_Framework

SPF will not necessatily stop the email being used for spam. It is the responsibility of the recipient server to check the SPF and some do and some don't. Those that do tend to give he email less trust if the SPF doesnt match and places the email in the spam folder.

I do agree however SPF should be added, remembering to update it to include the IP of any server that acts as an SMTP server for the domain. This may of course include a server the website is on if it sends as an email of that domain.

Another record that can help is a DKIM.

coffear

were wrote: »

Want privacy? Njalla a Domain Registration Service That Keeps Out ‘Unwanted Guests’

https://njal.la/


The founder of this is Peter Sunde, of Pirate Bay fame.

Personally I would not trust a service created by staff at Pirate Bay.

S0litaire

forgotmyname wrote: »

No .co.uk on that and starts at €15.

Is it me or are some sneaky people trying to nick the domain i keep searching for? Nice try but i made a slight variation as i only wanted prices i know the domain is free.

A couple i have searched for are no longer available.

And its not something most people would want. Who wants a bunch of consenants and no vowels?

Few years ago GoDaddy was caught doing that.
Every time you searched for a domain (via GoDaddy or affiliated sites) that wasn't owned by anyone, it's systems would automatically snap it up so you'd have to buy it from them (with a markup) instead of buying it at cost direct from ICANN.

S0litaire

coffear wrote: »

Personally I would not trust a service created by staff at Pirate Bay.

Actually it's you should reconsider...

They haven't been part of one of the longest running "pirate" sites for no reason. They are good at what they do, which is hide their data, sites and internet connections from tampering by government and corporate bodies.