[bdav24]

Hi ecesena,

> Why shouldn't a service flag you as malicious and refuse users with email from your domain?

Some services might block our addresses some day, but that would be a mistake because nBox is not a disposable email service.

> What do you do to prevent mass account creation on the service?

If your question is in regard to services which might block us, I don't think they care about mass account creation, a few email addresses are enough to bypass limits on emails.

[ecesena]

Thanks! The non-disposable is a good point.

As for my 2nd question it was related. Often time spammers rely on tools like nbox to create a massive amount of accounts on services like Winterest, so Winterest has to flag your domain as potentially malicious.

I was wondering if you have any countermeasures to this problem, such as a rate limit on the number of accounts one can create per service. I'm sure Winterest would appreciate :)

[bdav24]

You mean fraudsters trying to take advantage of account creation on Winterest?

For a given service we authorize only one address, but we haven't implemented a rate-limit yet.

[ecesena]

Yes exactly, fraudsters exploiting your service to have as many email as they need to create very many accounts on Winterest.

If you have 1 single email account per service that is fine.

I think you should call out these two aspects on your site, to show that you're increasing privacy for users, but also protecting services from being abused exploiting nbox. It should reduce the likelihood to be blacklisted.