7 ms·

I understand. But I was thinking, a potential attacker receives an email from me (me@customdomain.com), with this tool, they can look up and see that I use G S

• lgats 9y ago
  With any other custom domain, they can do the exact same thing only it's on a smaller web server perhaps running different software (which may or may not be up to google's particularly high security)
• mosselman 9y ago
  Using a good password and two-factor authentication basically eliminates this issue. You are looking for what is called 'security through obscurity' which is never a solid defence plan over real, verified, security (like real encryption, proper passwords, multi-factor authentication, etc)
  • pablo-massa 9y ago
    You are right. Thanks for let me know about 'security through obscurity', I'm reading the Wikipedia article now [0]. Yes, I'm using two factor and strong passwords (and encouraging people to do that, too). Thanks for let me expand my knowledge through education. [0] https://en.wikipedia.org/wiki/Security_through_obscurity https://en.wikipedia.org/wiki/Security_through_obscurity