Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Darkly)
  • No Skin
Collapse
Brand Logo
  1. Home
  2. Uncategorized
  3. I love you @404mediaco, but I really wish I had a password auth instead of the whole "email you a magic link" thing every time I sign in.

I love you @404mediaco, but I really wish I had a password auth instead of the whole "email you a magic link" thing every time I sign in.

Scheduled Pinned Locked Moved Uncategorized
51 Posts 29 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Thibaultmol 🌈 🔜 FOSDEMT Thibaultmol 🌈 🔜 FOSDEM

    @vkc @404mediaco I also complained about it to them before. Hopefully your voice carries more weight.
    Like..... some of us have good passwoord hygene and have password managers and such...
    Magic links are great... but as an option. Not if they're mandatory

    Matthew 🖖M This user is from outside of this forum
    Matthew 🖖M This user is from outside of this forum
    Matthew 🖖
    wrote last edited by
    #41

    @thibaultmol @vkc @404mediaco This also breaks #wallabag for me, as it cannot auto login and retrieve articles. 😞 @404mediaco @wallabag

    1 Reply Last reply
    0
    • Veronica ExplainsV Veronica Explains

      @admin I use a service to generate fake emails for this sort of thing, it's awesome! I can always tell *exactly* who sold my email to folks, or where email leaks came from.

      I almost never give out my real email to anyone other than a human I know in the real world.

      Matthew 🖖M This user is from outside of this forum
      Matthew 🖖M This user is from outside of this forum
      Matthew 🖖
      wrote last edited by
      #42

      @vkc @admin May I ask which service you use? I use #Firefox #Relay right now, but am looking for a replacement since forever.

      Veronica ExplainsV SlightlyCyberpunkA 2 Replies Last reply
      0
      • Veronica ExplainsV Veronica Explains

        I love you @404mediaco, but I really wish I had a password auth instead of the whole "email you a magic link" thing every time I sign in.

        As someone who deletes all cookies daily across a half dozen devices, it adds a bunch of friction.

        Juan C NunoJ This user is from outside of this forum
        Juan C NunoJ This user is from outside of this forum
        Juan C Nuno
        wrote last edited by
        #43

        @vkc @404mediaco A service I use occasionally *migrated* to this from good ol' fashioned passwords. It was exasperating.

        1 Reply Last reply
        0
        • SlightlyCyberpunkA SlightlyCyberpunk

          @vkc Same! Well, not a service, just wildcard aliases. Although I use hyphens in mine and occasionally sites roll their own validation code and decide hyphens aren't valid 🙄 Surprisingly enough, forwarding RFC5322 to customer service usually helps! Lol

          Honestly what I've learned is that most sites -- at least the ones I use -- are fine. Got a wave of spam from friggin Patreon when they got breached years ago...and I now filter out any ActionNetwork links from my feed on here...but that's basically all I've had an issue with in the >10 years I've been doing this.

          FettB This user is from outside of this forum
          FettB This user is from outside of this forum
          Fett
          wrote last edited by
          #44

          @admin @vkc Are you using ++ aliases or something that allow you to generate aliases from a common base, making less obvious your real address ?
          I was wondering if there was a way to generate indistinct e mail address on the fly different than using a domain name. I think that using a domain name is a good solution but it makes it easy to correlate my addresses to my real identity no ?

          1 Reply Last reply
          0
          • Veronica ExplainsV Veronica Explains

            I love you @404mediaco, but I really wish I had a password auth instead of the whole "email you a magic link" thing every time I sign in.

            As someone who deletes all cookies daily across a half dozen devices, it adds a bunch of friction.

            GothPandaG This user is from outside of this forum
            GothPandaG This user is from outside of this forum
            GothPanda
            wrote last edited by
            #45

            @vkc @404mediaco you know what? I'll hop on this bandwagon. Maybe we can be a big enough group to ask nicely, and they'll add it in for us.

            1 Reply Last reply
            0
            • Matthew 🖖M Matthew 🖖

              @vkc @admin May I ask which service you use? I use #Firefox #Relay right now, but am looking for a replacement since forever.

              Veronica ExplainsV This user is from outside of this forum
              Veronica ExplainsV This user is from outside of this forum
              Veronica Explains
              wrote last edited by
              #46

              @mcbaumwolle @admin I use Fastmail which integrates it.

              1 Reply Last reply
              0
              • Matthew 🖖M Matthew 🖖

                @vkc @admin May I ask which service you use? I use #Firefox #Relay right now, but am looking for a replacement since forever.

                SlightlyCyberpunkA This user is from outside of this forum
                SlightlyCyberpunkA This user is from outside of this forum
                SlightlyCyberpunk
                wrote last edited by
                #47

                @mcbaumwolle @vkc @bane Well, the wildcard alias part of it is done through a domain and mail account I pay for through Namecheap. They call it a "catchall" address, other providers might call it a wildcard alias, but basically *anything* @mydomain will all go to a single inbox. The nice part of that compared to some of the services that generate addresses (not sure if this would apply to Fastmail) is I don't have to do anything to register or set up a new address, which is nice when giving out my email in offline spaces. Although it does get weird when the Jiffy Lube cashier sees my email is 'jiffylube-shop@...' and goes 'Oh you must work for corporate' xD

                Of course, I can't leave it that simple 🙂 I have a mail server in my basement -- fetchmail pulls incoming mail from Namecheap, and there's a very small shell script that parses it out into different accounts -- so for example anything that ends in '-shop@mydomain' will go into the 'Shopping' inbox, while anything ending in '-pers@mydomain' will go into the 'Personal' inbox. Then dovecot serves those to my devices via IMAP, and any outgoing mail can bounce through an emailrelay instance on the same server and get forwarded back out via Namecheap.

                I hear trying to send email from a residential IP is a damn nightmare so that's why I route via Namecheap, but there's still both technical and legal benefits to pulling it all local and not leaving it all on third-party server indefinitely....

                Does make it possible to correlate to my real identity, especially because my domain for that is my actual name xD But most domain registrars can anonymize the whois information, so it won't be private from law enforcement or something but it should be private enough from randos on the internet...as long as you aren't tying that domain to your real identity in other ways.

                FettB Matthew 🖖M 2 Replies Last reply
                0
                • SlightlyCyberpunkA SlightlyCyberpunk

                  @mcbaumwolle @vkc @bane Well, the wildcard alias part of it is done through a domain and mail account I pay for through Namecheap. They call it a "catchall" address, other providers might call it a wildcard alias, but basically *anything* @mydomain will all go to a single inbox. The nice part of that compared to some of the services that generate addresses (not sure if this would apply to Fastmail) is I don't have to do anything to register or set up a new address, which is nice when giving out my email in offline spaces. Although it does get weird when the Jiffy Lube cashier sees my email is 'jiffylube-shop@...' and goes 'Oh you must work for corporate' xD

                  Of course, I can't leave it that simple 🙂 I have a mail server in my basement -- fetchmail pulls incoming mail from Namecheap, and there's a very small shell script that parses it out into different accounts -- so for example anything that ends in '-shop@mydomain' will go into the 'Shopping' inbox, while anything ending in '-pers@mydomain' will go into the 'Personal' inbox. Then dovecot serves those to my devices via IMAP, and any outgoing mail can bounce through an emailrelay instance on the same server and get forwarded back out via Namecheap.

                  I hear trying to send email from a residential IP is a damn nightmare so that's why I route via Namecheap, but there's still both technical and legal benefits to pulling it all local and not leaving it all on third-party server indefinitely....

                  Does make it possible to correlate to my real identity, especially because my domain for that is my actual name xD But most domain registrars can anonymize the whois information, so it won't be private from law enforcement or something but it should be private enough from randos on the internet...as long as you aren't tying that domain to your real identity in other ways.

                  FettB This user is from outside of this forum
                  FettB This user is from outside of this forum
                  Fett
                  wrote last edited by
                  #48

                  @admin @mcbaumwolle @vkc Oh okay, you indeed are slightly cyberpunk ;D
                  Your setup rocks but I certainly won't have the motivation to do the same lmao , i'll just register my domain in my mail provider if it allows it.
                  I guess you self host your mastodon instance too ? Are you federating easily ?

                  SlightlyCyberpunkA 1 Reply Last reply
                  0
                  • SlightlyCyberpunkA SlightlyCyberpunk

                    @mcbaumwolle @vkc @bane Well, the wildcard alias part of it is done through a domain and mail account I pay for through Namecheap. They call it a "catchall" address, other providers might call it a wildcard alias, but basically *anything* @mydomain will all go to a single inbox. The nice part of that compared to some of the services that generate addresses (not sure if this would apply to Fastmail) is I don't have to do anything to register or set up a new address, which is nice when giving out my email in offline spaces. Although it does get weird when the Jiffy Lube cashier sees my email is 'jiffylube-shop@...' and goes 'Oh you must work for corporate' xD

                    Of course, I can't leave it that simple 🙂 I have a mail server in my basement -- fetchmail pulls incoming mail from Namecheap, and there's a very small shell script that parses it out into different accounts -- so for example anything that ends in '-shop@mydomain' will go into the 'Shopping' inbox, while anything ending in '-pers@mydomain' will go into the 'Personal' inbox. Then dovecot serves those to my devices via IMAP, and any outgoing mail can bounce through an emailrelay instance on the same server and get forwarded back out via Namecheap.

                    I hear trying to send email from a residential IP is a damn nightmare so that's why I route via Namecheap, but there's still both technical and legal benefits to pulling it all local and not leaving it all on third-party server indefinitely....

                    Does make it possible to correlate to my real identity, especially because my domain for that is my actual name xD But most domain registrars can anonymize the whois information, so it won't be private from law enforcement or something but it should be private enough from randos on the internet...as long as you aren't tying that domain to your real identity in other ways.

                    Matthew 🖖M This user is from outside of this forum
                    Matthew 🖖M This user is from outside of this forum
                    Matthew 🖖
                    wrote last edited by
                    #49

                    @admin @vkc @bane Thanks! I also use wildcards, however I think when the mail gets sold to scammers (or however this works) they sometimes strip that part away.

                    > mail server in my basement

                    Most normal fedi user - love that!

                    1 Reply Last reply
                    0
                    • FettB Fett

                      @admin @mcbaumwolle @vkc Oh okay, you indeed are slightly cyberpunk ;D
                      Your setup rocks but I certainly won't have the motivation to do the same lmao , i'll just register my domain in my mail provider if it allows it.
                      I guess you self host your mastodon instance too ? Are you federating easily ?

                      SlightlyCyberpunkA This user is from outside of this forum
                      SlightlyCyberpunkA This user is from outside of this forum
                      SlightlyCyberpunk
                      wrote last edited by
                      #50

                      @bane @mcbaumwolle @vkc The mastodon instance is on a VPS, I have been thinking about pulling it literally in-house, but not sure I want my home IP tied to my social media. Feels safer to keep all of this on a different continent 🙂

                      1 Reply Last reply
                      0
                      • Veronica ExplainsV Veronica Explains

                        I love you @404mediaco, but I really wish I had a password auth instead of the whole "email you a magic link" thing every time I sign in.

                        As someone who deletes all cookies daily across a half dozen devices, it adds a bunch of friction.

                        MarkoD This user is from outside of this forum
                        MarkoD This user is from outside of this forum
                        Marko
                        wrote last edited by
                        #51

                        @vkc @404mediaco I use the cookies exeption function inside of Firefox. So some important logins surviving the automatic cleanup on exit.

                        1 Reply Last reply
                        1
                        0
                        • R ActivityRelay shared this topic
                        Reply
                        • Reply as topic
                        Log in to reply
                        • Oldest to Newest
                        • Newest to Oldest
                        • Most Votes


                        • Login

                        • Don't have an account? Register

                        • Login or register to search.
                        Powered by NodeBB Contributors
                        • First post
                          Last post
                        0
                        • Categories
                        • Recent
                        • Tags
                        • Popular
                        • World
                        • Users
                        • Groups