logoalt Hacker News

sixhobbits • today at 8:38 PM • 1 reply • view on HN

Yeah it's awful they keep coming months after you post anything as a Show HN now, definitely discourages me from doing it


Replies

dspillett • today at 9:00 PM

One option to reduce it, though this is work to setup initially:

1. Use a catch-all subdomain

2. Reject email to addresses where a simple checksum does not match (valid addresses being something like [email protected] where the klmn is taken from hash of asdfghij and some secret, anything not matching that pattern gets rejected) [this means running your own mail server so you can do that on incoming mail, running a scan to pick out and remove errant messages regularly, or having a mail client where you can implement this as a plugin]

3. On your contact detail page, don't give out a straight email address but have the the page run some Anubis style JS before asking the server to respond with an address that works

4. Once an address is obviously being used in a manner you don't care to respond to, add it to an explicit block list.

For extra protection from addresses being passed around (intentionally or via hack & other leaks), ask for their email address first and use that as part of the hash, then you can reject mail to your catch-all that doesn't come from the original other party.

Whether all this is worth the effort of implementing, is of course up to you. It probably isn't… I've been considering something like it, but mainly as a fun little project rather than something that would be massively useful.