ivolo / disposable-email-domains

A list of disposable email domains
1.24k stars 255 forks source link

Please remove Spamgourmet Domains from the Blocklist #933

Open pogue opened 2 years ago

pogue commented 2 years ago

Users of spamourmet (SG) use it as a forwarding service, not a disposable email address. My current stats on SG are as follows: [i]Your message stats: 11,615 forwarded, 100,376 eaten. You have 520 spamgourmet address(es).[/i]

So, wish Spamgourmet, I have saved myself from receiving over 100k emails. I use a separate email address for every site I sign up for, because there is always a likelyhood that site could be breached and all personal data would be leaked. Further, a great number of sites simply sell their email lists as a valid US citizen's email can be worth as much as $90 per email.

How Much Is User Data Worth?

You can check and see if your email has been sold (this site I'm a little skeptical about, I'm sure where they're getting information from, but it's Have I been sold? as well of course, Have I been Pwned?

We are not a group of abusive users attempting to use SG domains to circumvent protections on a website, but rather keep our personal information private as well as knowing if that account ever gets hacked, sold, etc. Often times we'll add a domain to our whitelist if we find the information useful.

I highly encourage the author(s) of this list to remove the Spamgourmet domains. These are not domains of abuse, this is an email forwarding service.

Thank you for your time, pogue

vm7096659522886852v commented 2 years ago

I join this plea as well, because:

1) some sites sell my information, 2) some sites are hacked and the information is stolen, 3) it is easier to maintain an username(mail address)/password pair, than just a password, 4) it is a pre-mailbox SPAM filter, saving bandwitdh.

Kind regards,

mikedlr commented 2 years ago

I also use spamgourmet for most of my long term email receipt. Without spamgourmet I would have reason to believe that many companies are spamming me. With spamgourmet I have been able to identify the very few that did sell my email address against my permission and been able to deal with them. When linkedin was breached and my email address leaked to criminals, because I use spamgourmet I was able to modify the address and maintain security. Spamgourmet provides tracking and email security which makes email usable for me and without it I wouldn't be able to use many online services.

Having spamgourmet on this list is inaccurate a) spamgourmet provides long term email addresses which remain available as long as the user wishes them to b) although those email addresses do block automatically if unexpected mail comes in, the user is able to unblock at any time in future c) there is a clearly identifiable per-user segment and full registration process which limits the possibility of using spamgourmet for abusive practices

In maintaining spamgourmet on this list the only people who are helped are the deliberate and criminal spammers who are sending spam emails without following the basics of the law. These are the small minority of companies that bring the entire marketing industry into disrepute. Even if you want to support marketing, I do not believe you should support criminals and so I do believe you should remove spamgourmet from the disposable email list. Allowing spamgourmet will allow people to interact with the more reputable marketing companies whilst not being burnt by the criminals.

ghost commented 1 year ago

Can SpamGourmet reply to incoming e-mails? If it can reply, it should be removed. If it cannot reply and is only for incoming emails, then I agree that it should continue to be on the list.

jgonggrijp commented 1 year ago

Spamgourmet can, in fact, reply to incoming emails.

tgoeg commented 1 year ago

Sure it can reply. All the usage scenarios listed above outline just that. It is just an abuse protection service that hides your real address from possible exploits. In fact, most of my spamgourmet usage starts with sending an email. I need to send a mail to some support address, do I provide them with my real address? To get it "lost" like for example Dropbox has done with my address (luckily already an SG protected one)? No! Just use an SG address. Get a reply. Reply back from your SG address. Just like you do with real addresses, but get protection. If anyone "loses" your data again, you'll instantly know who it was. In fact I reported Dropbox's data breach to them when it has not even been published yet, maybe before they even knew. The fact my address was dropbox.username@sg.com made it clear who "lost" my data!

jthvai commented 1 year ago

Relevant discussions: #872 #846

TL;DR though I would also like Spamgourmet and other email forwarding services to be removed as I feel like their presence on this list is often misunderstood by services providers, based on @GeroldSetz 's replies I highly doubt they would be.