added blogposts and fediham subpage

This commit is contained in:
Michael Clemens 2022-10-13 22:14:15 +02:00
parent 4d7cfb31d9
commit f9931d6adc
5 changed files with 38 additions and 4 deletions

View File

@ -7,7 +7,7 @@ subtitle = "personal website of Michael Clemens / DK1MI"
theme = "amberterm"
dateFormat = "2006-01-02" # default
publishDir = "../www"
publishDir = "/var/www/qrz.is/"
[mediaTypes]
[mediaTypes."text/gemini"]

View File

@ -22,7 +22,7 @@ This project combines different digital voice technologies with the aim of creat
# How to connect
At the current time it consists of the following reflectors/TGs/nodes:
* [YSF Reflector "DE Fediverse" 73737](https://fedihams.net/dashboard/)
* [YSF Reflector "DE Fediverse" 73737](https://dashboard.fedihams.net/)
* [DMR Brandmeister TG 2630002](https://brandmeister.network/?page=lh&DestinationID=2630002)
* [DMR TGIF Network TG 7337](https://tgif.network/tgprofile.php?id=7337)
* Echolink Node DK1MI-L 963110

35
content/post/email.md Normal file
View File

@ -0,0 +1,35 @@
---
title: "How I do Email"
type: post
author: micha
date: 2022-10-13T08:00:00+02:00
tags:
- email
url: /how-i-do-email/
---
I've used one single mail address for over a decade until it was involved in some breaches and thereupon has been sold to spammers. This address has been rendered unusable for me because I was drowning in spam sinve then. I've then decided to start over with a custom domain, unique mail addresses per website/account and update all my online accounts to the new addresses. In fact, I am now using 200+ mail addresses.
# The new system
* For every person/website/etc. a unique mail address is used.
* The part of the address before the _@_ consists of a descriptive name (e.g. _ebay_), an underscore (_\__) and finally some sort of public password. This can be any string and is used in all the mail addresses. Here is an example: _ebay\_xyz@domain.tld_. Only the part before the _\_xyz@domain.tld_ is account specific and therefore unique.
* Email addresses will not be explicitly created. With the help of a catch-all rule any mails sent to _domain.tld_ will be received and processed by filter rules.
* A filter rule deletes all incoming mails that don't end with _\_xyz@domain.tld_. This prevents getting spam sent to guessed and/or generic mail addresses.
* An additional filter rule deletes all incoming mails sent to a list of "burnt" mail addresses (see below).
* The new mail provider supports sending mails from any mail address of validated custom mail domains. When replying to mails sent to a unique mail address, the _FROM_ field is automatically poulated with the address of the _TO_ field from the original mail.
# Benefits
If an address is sold to spammers or a website gets compromised and my mail address gets stolen, I now immediately will know where the leak was. Furthermore, all mails sent to this address can then be automatically deleted with a filter rule.
Leaked mail addresses are constantly used e.g. in credential stuffing attacks. If I would use the same address anywhere, the attackers would then have one of (most of the time) two factors, the user name. It can furthermore be problematic if someone looks up a mail address in haveibeenpwned.com. People would then know where I have user accounts/memberships and might get the wrong impression on how I chose and handle passwords.
If someone asks me on the phone or in person for my mail address, I don't have to think about whom I give which address. I just generate one in my head and give it away.
# Downsides
I have not identified any downsides of this approach yet. One could fear that it's impossible to track where which address is in use. Since I am using a password manager, the mail addresses are documented there so it is not an issue to me.
# Improvements
I am thinking about changing the "public password" on a yearly basis in a way, that it reflects the year. One idea is to use the hex value of the year when the mail address has been created. This makes generating new addresses for the same account easier (if it doesn't happen twice a year) and helps with the filtering of burnt addresses.

View File

@ -15,5 +15,3 @@ From the [FediHams page on this website](/fedihams/):
"This project combines different digital voice technologies with the aim of creating a virtual space for voice communication between like-minded people. In the end, it should not matter which technologies individual participants use. It is also intended to provide access to those who do not own a special radio and can connect with their smartphone or computer instead."
Ed W8EMV wrote a great [post on his adventures with FediHams](https://vielmetti.typepad.com/w8emv/2022/10/fedihams-a-multiprotocol-digital-voice-interconnect-from-dk1mi-for-mastodon-and-the-fediverse.html)
![image](/img/diagram.jpg)

View File

@ -22,6 +22,7 @@ showthedate: false
* [Heated Trackball](/heated-trackball/) - Heating mod for Logitech trackballs
#### Amateur Radio
* [FediHams](/fedihams/) - The FediHams Digital Voice Network
* [colorspot](https://codeberg.org/mclemens/colorspot) - A colorful command line DX cluster client with LotW integration
* [AllStarLink Node](/allstarlink-node-build/) - My build of an AllStarLink node
* [Hardrock-50 Remote Display](https://qrz.is/hardrock50-remote-display/) - ESP32 based remote display for the Hardrock-50 power amplifier