Hacker News Reader

I don't want the sort of users who are signing up to perform financial transactions using services like mailinator and guerrillamail. It's always fraudulent.

Gmail itself is allowed, but the addresses are normalized. I'm well aware of its potential for abuse.

View on HN

I have infinity. I use Gmail for business with a catchall rule that forwards to the one address in my domain.

I have an email address for every site I sign up for.

Helps you figure out who sells your email.

How do you handle this? Or do you not?

I guess you could do a DNS lookup of the mail exchange records and see if it points back to gmail and compile a list of domains to allow one account from... but then that would break many companies emails. That’s no fun.

I use Fastmail in exactly the same manner (catch-all, I use "yourdomain.example@mydomain.example" as the email address for signups). Also, anyone could put a cheap domain name on Migadu with a catch-all for this purpose.

Services need a better way to figure out fraudulent or abusive behaviour than guessing based on the email account's domain name.

I think what the parent meant was that creating multiple gmail accounts is also piss-simple.

I personally own over 100 from a couple years back when recapta was easily automateable and the phone-number requirement wasn't there.

Reply on news.ycombinator.com