Hacker News Reader

Comment by nilved | Hacker News Reader

> Rule Zero: Never rely on a URL that you don't control. Use your own domain name for your e-mail addresses. Use your own domain name for canonical links to content. If you control the URLs, you do not depend on any one provider.

You do not own your domain name. It's better than using google.com, but your domain name can be stolen or seized just as well.

View on HN

Domains can be stolen or seized, but somehow the internet still manages to function. If you're not doing anything silly or shady, domain names are extremely durable. They're certainly more durable than an e-mail address or a subdomain on someone else's domain, more durable than a phone number or a street address. If you can choose only one identifier by which people can contact you, there is no better choice than a domain name under your own control.

Your definition of "silly" or "shady" might not be congruent with every other person's. com domains have been seized for a variety of reasons. However, them being stolen is much more likely. As a security-inclined person, the domain registrar is the first thing I would target as an adversary. Very often they don't have 2FA; and once you have access, e-mail follows.

It goes without saying that this is only a small part of a bigger picture; using your own domain name is a good idea, but not a perfect solution.

Not to mention they are stealing not only your e-mail data but your entire digital identity. Now they can reset the password of all your accounts, send e-mails in your behalf, buy things in your name.

I just don't trust DNS, domain registrars and all the things I would need to secure to have a custom domain e-mail.

Reply on news.ycombinator.com