Hacker News new | past | comments | ask | show | jobs | submit login

The simplest hack I can think of is:

* Making a wildcard email address for domain, say @example.com

making a filter that only allows sourcedomain@example.com (or user_sourcedomain@example.com) to accept mails from @sourcedomain

Could replace it with hash in second part hashing whole sender's address with some secret but that might be annoying if you have to tell the email via phone and now it needs to be generated manually

But

> 4. Even if the original authorized party tries to email me from a different address at the same domain, that email will be handled as in (3). 5

Would likely bite you HARD as it isn't too uncommon practice to respond from other email if say you are contacting some generic alias (contact@) but get answer from (john.doe@) that handles your case.




Yeah, I abbreviated the spec. If I were putting together a full requirements doc for this feature, it would have to include different levels/types of filtering. So e.g. if I registered my email with signup@walmart.com and then received email from noreply@walmart.com, that wouldn't receive the same sort of blackholing as an email using the same token but from *@sospammy.com


If it was new protocol the XMPP approach would most likely be saner.

Which is "if I don't put it on my contact list you ain't getting thru". The invite spam is far easier to handle than message spam.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: