burner-email-providers

For an example of that, see here: https://github.com/wesbos/burner-email-providers/pull/339 But yes, definitely a concern that is constantly on our radar.

Hi, can you please not block Firefox Relay for sign-ups, which I use to protect my email address? I don't trust your company with my real email address (I don't trust any company) and I think that's fair. EDIT: for why you should reconsider blacklisting Relay, one of Relay's developers gives a good answer at https://github.com/wesbos/burner-email-providers/pull/339#is... Another request: if you used a blocklist found on GitHub I'd really appreciate a link to it so I can make my argument for why Relay deserves to be spared.

> Setting limits (...) makes it harder to abuse services with those identities. Almost no legitimate users actually need truly unlimited email addresses (...). Even generous limits would help to avoid many problems. Note that Relay already rate-limits customers: > we limit our free users to 5 total aliases, and we rate-limit our premium customers so they cannot create large-scale throw-away aliases for abusive sign-ups and behaviors. https://github.com/wesbos/burner-email-providers/pull/339

(I'm an engineer on Relay.) Relay has anti-abuse protections too, which is why it was removed from a similar list: https://github.com/wesbos/burner-email-providers/pull/339

We're actively reaching out to maintainers of such lists (see e.g. [1]) to get us removed, and take a number of measures to make that more palatable (see also [1]). And of course Relay is a bit different from services like Mailinator, where email addresses are usually actually single-use: Relay addresses remain active until their owner actively disables them. Possibly in the future it might also be possible to bring your own domain, but I don't think we have any concrete plans for that that we can share. That said, no solution is perfect, and I expect that there will likely always be situations where you will be forced to fall back to a regular email address. [1] https://github.com/wesbos/burner-email-providers/pull/339

https://github.com/wesbos/burner-email-providers/pull/226 more informations there. In case anyone wasn't aware, @tuptuptuu is a throwaway account seemingly created solely for the purpose of adding the hey.com domain to disposable email lists. See similar pull requests this person has filed: andreis/disposable#50 martenson/disposable-email-domains#244 wesbos/burner-email-providers#226 micke/valid_email2#153 so you are a liar.

There was a ShowHN (can't find it) about an API that pre-qualifies email addresses. I think it just checked if the email syntax is valid (see related discussion https://news.ycombinator.com/item?id=16799976), if the domain really exists and if the domain is a known burner domain (I use this list https://github.com/wesbos/burner-email-providers/). Personally I can't use such an external service (in Europe) because with GDPR regulation sending a third-party a list of email addresses without user consent is better avoided.