[sylpheed:37287] Re: Microsoft dumping app passwords and basic authentication by September 16th, 2024: OAuth, Sylpheed 8 beta 1 and Windows 7, ¿works?

[G.A. L.F.]

> What is wildcard-domain aliasing?

Suppose you have your own domain, let's just say by way of example it's "
foobar.com".  Now suppose you configure your mailbox at your provider to
use the main inbox user account as "craig at foobar.com".

Now let's say that your mail provider supports wildcard aliasing, you
configure the alias so that in effect "*@foobar.com" is directed to "
craig at foobar.com".

Now let's say (by furthering the example) that you sign up for coupons from
your local "Ralph's" grocery store.  When they ask you for your email
address you give them "ralphs-grocery at foobar.com".

When email comes into "ralphs-grocery at foobar.com" it's directed to the
inbox of "craig at foobar.com".

It's wise at this point not to ever disclose to anyone that "
craig at foobar.com" is the target real email address.

When you see unwanted messages (e.g., spam, whatever) going to the "
ralphs-grocery at foobar.com" recipient address -- and the messages are not
originating from Ralphs Grocery -- then that means that Ralphs could have
sold your email address to third party marketers, or they could have
experienced a security breach, or who knows what.  If you have really good
control of your inbox you can configure a mail rule, or alias to filter (or
"/dev/null") all email sent to that alias.

It's a method that I started using to take control of my inbox years ago.

Regular google mail has a feature that means to accomplish the same thing
by using the '+' sign in the gmail.com username (e.g. "
craig+ralphs at gmail.com").

The upside to aliasing is that you can track mail senders by the target
recipient address used.  It's advisable in such situations to try and keep
good records about what aliases you've used over the years.  The downside
is that once you've invested in an aliasing technique it's difficult to
abandon it, since (as in my case) I have hundreds of aliases being actively
used for everything from bills, subscriptions, businesses I've dealt with,
job applications, IRC, friends, hobbies, etc.

So far Fastmail and Gmail are the only two providers I've encountered that
support wildcard aliasing, but I haven't really done much due diligence on
other email providers this far.  I'll probably end up moving to Fastmail
before the October 1st deadline.

Cheers,
-G


On Tue, Jul 9, 2024 at 10:58 PM Craig <freecycle01 at pisquared.net> wrote:

> On Wed, 10 Jul 2024 01:31:17 -0400 Brian Sammon
> <sylpheed-list at brisammon.fastmail.fm> wrote:
>
> > On Sat, 6 Jul 2024 17:48:25 -0700
> > "G.A. L.F." <the.real.galf at gmail.com> wrote:
> >
> > > On the subject of other mail providers, does anyone know of any email
> > > providers that support wildcard domain aliasing?
> >       ....
> >
> > I use fastmail, and use their wildcard-domain aliasing service.
>
> I guess I'm ignorant and uninformed.
>
> What is wildcard-domain aliasing?
>
>
> Craig
>