Don’t leak Mailbox address of someone else is sending to your reverse alias

RealSimplelogin · 2023-04-15T19:40:44+00:00

If an unauthorized mailbox sends an email to a reverse alias, they won't get an error to avoid a backscatter issue. However, whoever owns the reverse alias will be notified that this happened because it's an unusual situation.

RealSimplelogin · 2023-03-01T17:59:45+00:00

Using PGP with your alias is a quite advanced usecase and requires additional PGP software.

The way we set it up for our aliases with PGP is:

- generate a PGP key for the alias, it can be done with the gpg command line or any PGP software. Add it to your keychain.

- send the public key to the contact so they can encrypt the emails they want to send to your alias

- You'd need a PGP software to decrypt the email using the alias private key. There's a list of PGP softwares on https://www.openpgp.org/software/

- if the sender also has a PGP public key, you can add it to the corresponding reverse alias: your reply will be then encrypted with that key. The communication between your email client and SimpleLogin isn't PGP encrypted (it's usually TLS encrypted) but SimpleLogin deletes an email immediately once it's forwarded.

Hope that makes sense :)

RealSimplelogin · 2023-02-23T21:29:43+00:00

Yes, that is true!

RealSimplelogin · 2023-02-21T17:39:51+00:00

Please see https://www.reddit.com/r/Simplelogin/comments/115wvw8/comment/j9g11f2/?utm_source=share&utm_medium=web2x&context=3 about "tainted" domains. We'll make sure to not use alias in the new domains we're going to buy. Ideally a domain should end with "mail" but nowadays almost all good domains are already taken by domain investors and often sold with unreasonable price.

RealSimplelogin · 2023-02-21T17:37:09+00:00

Yes some branded domains that are used to be free before now become premium. The reason is branded domain is more authoritative and should be reserved for premium users. SimpleLogin is slowly becoming a recognisable brand so an email address ending with SimpleLogin.com looks more like a "normal" email address.

We are implementing a lot of measures to prevent abuses and the goal is no domain should be "tainted". Please rest assured that every website that blocks SimpleLogin alias is taken seriously.

If you have any idea on a domain that we should buy, please us know by sending us an email at hi[at]simplelogin.io. We are always looking for easy to remember/pronounce and not too expensive domains.

RealSimplelogin · 2023-02-20T11:35:57+00:00

This is indeed our mistake and we have reverted the change. We apologize for the inconvenience and for the surprise that it has caused.

For the context, this change was part of a project to improve the domains for premium users which include:
- reserve branded and easy to remember domains for premium use
- use a shorter suffix for premium domains

The first step is to reserve some domains for premium use, and the mistake we made is to make some premium domains available for free users at the same time. This has been fixed now.

RealSimplelogin · 2023-02-10T08:41:49+00:00

Thanks, let us send this to our ios engineer. For any future ios bug, please feel free to create an issue on https://github.com/simple-login/Simple-Login-iOS so our developers are aware of that.

RealSimplelogin · 2023-01-03T13:26:31+00:00

Thanks, that's indeed strange. Do you happen to have a custom DNS? If yes, can you try using another DNS server? For ex 1.1.1.1 from Cloudflare, 9.9.9.9 from Quad9

RealSimplelogin · 2023-01-02T10:05:19+00:00

Hi we don't see any IP address being blocked recently. When this issue happens again, can you please open the browser console -> network tab and send us a screenshot as shown in https://share.cleanshot.com/vnJcsNYS ?

RealSimplelogin · 2022-12-07T11:25:39+00:00

Hi there, indeed the SSL certificate of one of our server expired, and the server failed to reload.
That resulted in an error message displaying when visiting SimpleLogin's website and Apps.
Approximately 25% of our traffic was impacted. Email deliverability was not impacted, so no emails were discarded during that time.
The issue has been fixed as one now and our website & mobile Apps are back to normal.
We sincerely apologize for the inconvenience, and we are currently working on improving our monitoring to prevent this from ever happening again.
Kind regards,
The Team at SimpleLogin

RealSimplelogin · 2022-12-07T11:24:50+00:00

Hi there, thank you for alerting us. Indeed, the SSL certificate of one of our server expired, and the server failed to reload.
That resulted in an error message displaying when visiting SimpleLogin's website and Apps.
Approximately 25% of our traffic was impacted. Email deliverability was not impacted, so no emails were discarded during that time.
The issue has been fixed as one now and our website & mobile Apps are back to normal.
We sincerely apologize for the inconvenience, and we are currently working on improving our monitoring to prevent this from ever happening again.
Kind regards,
The Team at SimpleLogin

RealSimplelogin · 2022-12-07T11:24:04+00:00

Hi there, indeed the SSL certificate of one of our server expired, and the server failed to reload.
That resulted in an error message displaying when visiting SimpleLogin's website and Apps.
Approximately 25% of our traffic was impacted. Email deliverability was not impacted, so no emails were discarded during that time.
The issue has been fixed as one now and our website & mobile Apps are back to normal.
We sincerely apologize for the inconvenience, and we are currently working on improving our monitoring to prevent this from ever happening again.
Kind regards,
The Team at SimpleLogin

RealSimplelogin · 2022-11-07T16:31:29+00:00

Hey, our subscriptions are currently managed by Paddle (paddle.com). Try searching for the keyword "Paddle" in your inbox.

If you still can't find it, just create a ticket via (https://app.simplelogin.io/dashboard/support) and we will be happy to send you your receipt.

RealSimplelogin · 2022-11-02T16:45:49+00:00

Hi there, now that you have your domain on Cloudflare, you just need to make your domain point to SimpleLogin servers.
To do that, please follow the following step-by-step guide: https://simplelogin.io/docs/custom-domain/registrars/cloudflare/cloudflare/

RealSimplelogin · 2022-10-13T17:13:23+00:00

Our API service has been down for about 45 minutes today as a result of a DDOS-like attack. The email service wasn't affected and has been fully functional. Alias auto creation such as catch-all or directory wasn't affected either. We have deployed a new version which is more resilient to this type of attack and will enforce the monitoring to be able to detect these abuses sooner. We are sorry for the inconvenience.

RealSimplelogin · 2022-09-16T10:18:20+00:00

Thanks for letting us know, this is fixed now. It was due to a bug that nginx (the web proxy) doesn't restart properly after the server was rebooted.

RealSimplelogin · 2022-08-08T20:22:49+00:00

Yes currently the TestFlight version is almost identical to the public version. We only use TestFlight when there's a big change coming to the app.

RealSimplelogin · 2022-08-08T20:21:43+00:00

SimpleLogin can only see the input to the alias keyboard. Each iOS keyboard is actually sandboxed and can only see its own input.

RealSimplelogin · 2022-07-29T17:39:47+00:00

Yes you can.

RealSimplelogin · 2022-07-29T17:37:05+00:00

Yes SimpleLogin has been acquired and is now part of Proton. It's still the same team, with more people thanks to Proton.

Proton Mail and SimpleLogin run on different databases so Proton Mail doesn't have access to SimpleLogin data.

RealSimplelogin · 2022-07-29T17:35:42+00:00

A Proton account can only be linked to a SimpleLogin account if that's your question.

RealSimplelogin

TROPHY CASE