For security reasons

Security professional here. This is legit a good call on their part. It's because those types of addresses won't bounce emails but aren't necessarily in your control; it's very, very easy to spam those petition forms with mail@ for a million real domains without bouncing the emails, making them seem legit.

You own your domain, obviously, so it's really as simple as creating a forwarding/alias address of "changeorg@domain.tld". If creating a forwarding/alias address is that much of a problem for you I suggest that you likely shouldn't be hosting your own email in the first place.

Your laziness isn't a good reason to be upset with a company taking steps to reduce their security overhead significantly

If you own the domain being used, I assume you also host your own email... You can't just make a new address for this and have them all forwarded to your actual email?

"This_is_not_generic" @ "your actual name"

Unless they block that too, I don't think they're trying to force those services on you; they're just popular options and this is an automated response sent by an automated process that only checks the first half of the email and not the domain.

Create an alias and set forwarding

I haven't ever used it, never signed a petition, but isn't change.org only about petitions? I can kinda see their reasoning.. They may even have had their hand forced to do it.

Loads of people who want their way probably signed up with tons of accounts to skew the results. If it's going to work, I guess they need to be able to show that they're legit, out at least that change.org are doing their best to make it that they are.

It's easy to set up one gmail account for example and use it a million times with moving a dot throughout the name or putting a plus sign and anything after the username but before the @ symbol.

Ah, change.org. I remember when they said "you can sign a petition without an account, just a mail validation", immediately followed by "if you don't create an account, the validation link in the mail will not work, fuck you".

Guess they didn't really want people to engage.

That's quite a sensible rule, actually.

Please use a personal email. My email is ‘mail’ @ ‘my actual name’. It does not get more personal than that

It's a legit rule they're enforcing, IMO. Generic email addresses are usually unmonitored mailboxes that don't bounce. Easy to use if you're spamming contact forms and stuff like that.

Instead they advised me (3 times) to create a personal email on a service like Yahoo, Outlook, Gmail, Orange, etc

I think this is more a boilerplate suggestion, to lower the barrier to entry for people. Gotta remember, those of us that host our own email and/or use our own personal domains are definitely in the minority.

lol “security” in this case is probably more like expediency in trying to solve a spam problem

Here's the thing, you own the domain, set up what ever email alias you want and send it to your primary.

Maybe we can start a change.org petition to get this resolved.

fuckyouchangedororg@my.actual.name

As a person who ages ago created and single letter (before the @) email address thinking myself clever and efficient... I'm amazed and distressed how many forms have insisted that my email address is invalid.

This is a feature, not a bug. The rest of us don’t want crap being sent to admin email addresses, so fix your damn email and try again.

Personally I use generated email addresses to most places, but my personal address is <FIRST>@<LAST>.us

Then I guess for security reasons you won't be signing up.

If your domain is your actual name, then it should be trivial to create an SMTP alias for mail@domain.com that is for yourname@domain.com.

Attach that to your email address and inbound email for either will get to you, but only your primary address will be used for outbound communication.

Another fun one...

Gmail ignores periods in addresses.

So firstnamelastname@gmail.com also gets email for:

firstname.lastname@gmail.com
first.name.last.name@gmail.com

Or any combination...

f.i.r.s.t.n.a.m.e.l.a.s.t.n.a.m.e@gmail.com

Wouldn’t it make more sense to alias out each place you submit an email address to, so you can see who sells your contact details or otherwise gets hacked?

Eg: changeorg@yourna.me, netflix@yourna.me etc.?

Set all mails addressed to your domain but to the wrong email to be sent to your primary email. Then sign the petition with "<service_you_are_signing_up_fo>@yourname.com".

Is it possible to create an alias like fuckchange@domain?

Had something similar happen with indiegala. Had an account with them for years, then one day, could not purchase some games randomly. Hit up their support and got the answer "Oh, the purchase was denied because your account's email address is detected as a temporary email address".... The email address I've been using on that account... for years.... Is temporary.

I create a new alias account on my email server for each new account. That way when I am done with them I can just delete it and never get their spam ever.

This continues to really piss me off. I have a domain with a .xyz top level, and i’ve encountered more than a handful of services, that either repeatedly tell me I’ve meant to enter something else, or straight up block me as a spammer

As others have said, I'd suggest either:

• enabling a catchall address (which will redirect to anything@yourdomain.com --> spam@yourdomain.com)
• creating an alias: something@yourdomain.com --> mail@yourdomain.com

Both are done on your server/hosting side.

From the end user standpoint...my interest in reading about much less signing this petition just plummeted

So which corpo monitored email address did you end up going with?

Yeah I also have a non-standard email address, and I occasionally run into systems that aren’t properly set up to handle odd domains. I’ve definitely seen the “Please enter a valid email address. Make sure it ends with @gmail/yahoo/outlook etc” messages before.

abuse@website-im-visiting.com probably wouldn’t work as well …

They're advising you to use a personal email that is tied more directly to your name or identity, like using Yahoo Mail, Outlook, or Gmail, which they view as more personalized.

If you'd like, you could try creating an email address with your actual name (or a variation) on one of the recommended services, like: yourname@gmail.com yourname@yahoo.com This should resolve the issue

But you can't use emails starting with mail@, admin@, support@, info@, main@, etc.

If it's exactly stuff like "mail@", many mail systems will redirect stuff with a plus suffix to your main mailbox, like "mail+changeorg@". That might be okay.

they want the DMARC ><

Stop using self hosted email. It's just not worth the hassle.

Could you not just make a second email account that you just use for things like this? Why is the only alternative to use your personal account? It takes like 2 minutes to make an alternate Gmail account lol