Comment by onlyhumans
Comment by onlyhumans 20 hours ago
Fastmail is kind of a weird service. If you stop paying they release your email for someone else to take over. Pretty unacceptable this day and age.
Comment by onlyhumans 20 hours ago
Fastmail is kind of a weird service. If you stop paying they release your email for someone else to take over. Pretty unacceptable this day and age.
This does not appear correct. I lost my original account in 2013 and the handle is extremely unique, and I just tried to reregister it, and it won't allow it. ("Sorry, [redacted]@fastmail.fm has already been taken.")
Are you sure you didn't confuse domains? My original handle is on fastmail.fm, but it will let me register that on fastmail.com.
I really wish all mail providers made it easy and seamless to bring your own domain (or register and manage one in the background for you, without you having to care for the details). Obviously giving a service-tied email domain to users is a great lock-in strategy. But it's worrying that so many people have a big part of their online identity tied to Google.
(You can even sign up for a Google Account without GMail, using a third-party domain. And this is distinct from Google Workspace, or whatever they're calling it today. You get a normal, regular, personal Google Account, just without GMail and using your own non-gmail.com address.)
Fastmail makes it super easy to bring your own domains. As many as you want even on their cheapest plan.
Yes, I use Google (that's rare; when I 'must' must) with a icloud.com temp hidemyemail address created Google a/c.
This would be easily solved for customers who care about it by allowing you to pay a one-off fee to reserve the name for ~100 years.
Or they could just absorb that.
Any idea why it works that way? Have they offered an explanation?
I'm a Fastmail customer but I've never noticed this because I use my own domain.
With Fastmail, creating an email alias is free, and quick -- I have dozens myself. There's good reason FM would not want these to be tied up forever.
Could the above report have lost the distinction between original, paid-for Fastmail address, and user-created free aliases to it?
When you move to a new house the old address becomes available for mail eventually.
Email is used a single factor (either because of magic links or forgot password flows), so the impact is much larger than getting your snail mail sent to someone else.
Also, whoever takes your old residence is probably not malicious (they just want the house because they want a house), but whoever takes your email address is much more likely to be malicious (as the acquisition cost is low and it scales).
I don't think that's true. Some years ago I did a free trial with them (did not pay anything). More recently I decided to actually sign up (for a paid account) and the email address I used for the free trial years ago was not available. I eventually got that username only after contacting support and giving them the date on which I started that free trial, to prove it was me.
I use Fastmail with my own domain. I am not sure of the logic that says paying $60/year for email is fine, but $8/year for a domain is a bridge too far.
Do that, it's a non-issue, though I do agree with you that it shouldn't be a thing (or at least have like a multiple year embargo on the address).
Using domain for identification carries a similar risk though? If for whatever reason you stop renting the domain somebody else can rent your identification. You are not locked into an email provider but you are locked into a rented domain and the whole domain marketplace rules, by extension. At least with most email providers your email address is not supposed to be resold (likely with fastmail too judging by the responses).
Am I missing something?
> Do that, it's a non-issue
I think the issue is why use an email provider that has designed such a glaring security hole into their system? Does it not raise questions about their judgment in other matters that are less visible to the user?
First, it’s not been established that they do have that security hole. Someone upthread said the email address they used during a fastmail trial was no longer available when they tried to sign up later because they didn’t want to give out the address again.
Second, and I don’t know how much weight this carries - but I personally know some of the people on the Fastmail team. They’re some of the most thoughtful, steady engineers I’ve ever met. Every time I’ve criticised something about Fastmail to my friends there, it turns out they’ve had the same discussion internally and immediately tell me about a bunch of arguments I hadn’t thought of which explain their final product choices. I wish much more of my software was made at companies like that. They have excellent judgement. They’re absolutely the right kind of people to host a long lived email service.
You can find several discussions of this practice online, including people commenting that they receive email for previous holders of those ids.
The commenter above may have never deleted the alias to release it for reuse.
Reusing email addresses is pretty universally considered terrible practice. So you may want to discuss it with your friends there.
Domain names work the same way -- once you stop paying for it, someone else can buy and use it.
Do you have the same problem with domain names? If so, how would you propose to fix it?
That's incredibly dishonest reasoning. Are you seriously telling me that unless people have a solution for fixing DNS, commercial email should be free to hand out used email addresses? Seriously?
Sure.
Now that you've said what you wanted to say about how dishonest the question is, would you like to either answer it or explain why the analogy fails to hold?
Are you the type of person who thinks it's okay to dump garbage on your neighbor's lawn because governments haven't been successful at stopping pollution? Because that's the extract same rhetoric you're using.
You don't have reserved/registered post bags (with a identifier at a certain post office) in your country? Or not available to individual users?
This way - many different providers either lock that username away and throw the key (even you can't get it again; some give you the key instead of throwing away but no space in their home until you pay again) and some just graciously offer a free plan with that address whith little or barely any resources (which is actually great and very generious of them). Which ones? Google around and you shall find.
Any provider with a free tier doesn’t have the issue so that covers a lot of them
The trick is in never ever touching the username@paid-main-provider.tld to give out to anyone. It's just for logging in.
My mailbox.org username is literally three random short Engish dict words concatnated by underscores (e.g jet_sit_gill@mailbox.org) just to ensure I'd never share that email with anyone. I only use my domain's email addresses. This way there's ZERO lock, zero fear of them giving my email to someone else and staying with the domain provider for a day longer than I have to.
For email addresses on others' domains here
- icloud.com came with the devices (I honestly have not thought about what happens to these if I have zero Apple device at one point in future :D)
- tutanota(barely ever used; just to support them I paid until they removed the 12/year plan)
- protonmail, and sdf.org (ARPA)
All of these at least let me hold on to the email address even with little resources when I stop paying or have an unpaid a/c. So little risk of email goign to someone else. And I never use these for anything important anyway.
For temp emails - duck.com, HideMyEmail (stopped using this one for new accounts though).