emailipleaktest.com
Security and privacy
email privacy testing
SHOW HN2013
How HN took it
0 positive, 13 neutral or asking, 0 mixed, 13 critical, out of 26 comments about the project. Thread score -0.49.
Idea: 0 for, 7 againstExecution: 0 for, 4 againstPrivacy: 0 for, 1 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Neat idea and useful for awareness of email IP leakage
From 2 comments
Neat idea but I (and like 1% of the Internet population so it's clearly of utmost importance!) connect to GMail over IPv6 so you won't catch that even if they leak. On a related…
spindritf on HNI would like to imagine this is more for awareness. Why would exchange server want to include x-originating-ip? Is it for validation and authentication? Do we not trust people…
3825 on HN
Objections
Fails over IPv6; reports false negatives when connecting over IPv6
From 2 comments
You know, IPv6... I'm getting a false "Your email has been received and it doesn't leak your IP", due to the fact that the web site is only available using IPv4 while I'm…
andreaso on HNNeat idea but I (and like 1% of the Internet population so it's clearly of utmost importance!) connect to GMail over IPv6 so you won't catch that even if they leak. On a related…
spindritf on HN
Test adds little beyond sending yourself an email and checking headers
From 1 comment
I just tested this out of curiosity to see if it showed me anything else other than what I could already easily find out by myself via just sending myself an email and looking at…
pallandt on HN
Possibly a lead-generation or email harvesting site; suspicious of ties to VPN marketing
From 4 comments
Is this a site that is trying to (inefficiently) harvest IPs <-> emails? :P
jey on HNSame feel: Copyright (C) 2013 London Trust Media, Inc. Immediately lost my "Trust". Added to that, knowing how persuasive and creepily mad London politics is about evading…
X4 on HNLooks like a thing to scare you in to buying the VPN service from Private Internet Access (PIA)
mingabunga on HNWarning: your email is possibly harvested for spam. I tested this yesterday with a newish account and already received unwanted email.
pallandt on HN
Requests
Handle IPv6 and detect IPv4 addresses when the site is reached over IPv6
From 1 comment
You know, IPv6... I'm getting a false "Your email has been received and it doesn't leak your IP", due to the fact that the web site is only available using IPv4 while I'm…
andreaso on HN
Include solutions for leaking headers, not just the test result
From 1 comment
You should include a collection of solutions after a positive. Or is this really only marketing?
aluhut on HN
Questions
Why do email servers include X-Originating-IP headers at all?
From 1 comment
I would like to imagine this is more for awareness. Why would exchange server want to include x-originating-ip? Is it for validation and authentication? Do we not trust people…
3825 on HN
Does Google Apps web interface add the X-Originating-IP header while regular Gmail does not?
From 2 comments
I just tested one from my Google Apps account's web interface and emailipleak.com claims that it didn't include my IP (same sending on that account through Outlook 2013 too). I…
Encosia on HNRegular gmail.com accounts do not send this header, but I've recently found out that all Google Apps accounts do, and have for a while. I assume there's some kind of a rationale…
meowface on HN
Alternatives named
Sending yourself an email and inspecting the headers
From 1 comment
I just tested this out of curiosity to see if it showed me anything else other than what I could already easily find out by myself via just sending myself an email and looking at…
pallandt on HN
Postfix header_checks to strip Received headers
From 1 comment
After the Snowden leaks, I moved all of my e-mail to a server I own. I use authenticated SMTP with mutt and Thunderbird on my laptops and also occasionally run mutt on the server…
jlgaddis on HN