Am 04.09.22 um 21:49 schrieb Radek Kaczynski via mailop:
> Those few domains with small traffic are:
> - bringmesomejuice.com <http://bringmesomejuice.com/>
> - iusedtolikeit.com <http://iusedtolikeit.com/>
> - sometimeinthepast.com <http://sometimeinthepast.com/>
> - mybigfluffyfriend.com <http://mybigfluffyfriend.com/>
You certainly realize why this marks your operation shady (just as most other
e-mail verification businesses)?
Personal e-mail addresses are protected private information under european GDPR laws. When you process this data (and
probing mail servers to see whether an e-mail exists is already some kind of processing) you need a valid reason under
those laws, and of course you need to be identifiable, because the owner of such an e-mail address has a legal right to
know who stores and processes their data for which purposes.
If you're using domain names registered through proxy services, hosted on a cloud provider who wouldn't reveal your
identity unless we pry it from their cold dead hands, you're actively subverting these laws.
Of course, by stepping forward to participate in this discussion you're exposing yourself to quite some fire, that's
pretty courageous and certainly a bit better than those cowards who prefer to stay anonymous. But still your business
model is the same as theirs.
Even if you try to appear as friendly and open, would you be willing to reveal the names of your customers who requested
an e-mail address verification if you were asked by the e-mail owner?
I had an exchange with someone from a similar service a while ago, after I found out that they (and some other mail
validation services who didn't even reply to my request) have been trying to check an e-mail address on our server which
did not exist (we reject such accesses without revealing whether the address exists or not). I set up the address as a
spam trap when I noticed, and a very short time after this it received porn and fake dating spam. I asked the validation
service who their customer was, and they could or would not tell me (they claimed that they didn't have that data
anymore, I can't verify or falsify that claim, of course).
As soon as a validation service is transparent about who they work for when checking an address, I may exempt them. Fat
chance.
Cheers,
Hans-Martin
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
