The media expose a great many cases of email theft, some of them after impersonation before the telephone company, cloning/migrating the telephone sim, in the most important telephone companies and with a mere telephone call, in order to use the mail recovery mechanism through sms. This method has been used for different thefts, including criptocurrency ones, in exchanges whose security is linked to email.
If by any chance you are not sure what I am talking about, here are three articles; in the last one, John MacAffe (the creator of antiviruses) tells how his email was stolen.
-
http://fortune.com/2017/08/22/bitcoin-coinbase-hack/-
https://medium.com/@CodyBrown/how-to-lose-8k-worth-of-bitcoin-in-15-minutes-with-verizon-and-coinbase-com-ba75fb8d0bac-
https://cointelegraph.com/news/john-mcafee-well-screw-up-the-future-but-itll-still-be-better-than-what-we-have-todayI infer that -just as things are- it is essential to remove the option of email recovery through sms/voice from a phone, that, by the way, is the default option supplied by email companies.
Checking Gmail, the biggest email supplier, I can observe:
- The protocol for email recovery is something absolutely obscure (whose documentation I can't find anywhere).
- After trying the button "I have forgotten my password", they ask me a series of ridiculous questions such as the date when I created my account, another email address, a telephone number (although I may not have given one or either I may have removed it)...everything automatic, without a support address and no explanation.
- There is no support address, not even for doubts or safety complaints.
The rest of email suppliers seem to be similar...
So my questions are:
1. Is Gmail safe under any determined configuration so that nobody can steal your email under any method? What exactly is that configuration? (without considering those who get connected through without any caution in any dirty computer).
2. Is there by any chance official documentation explaining those recovery mechanisms? I am beginning to distrust email suppliers. I think they are risking everybody's safety and transforming something very serious into a toy for careless people.
3. Do you know a good place to present these doubts and complaints that can be solved with clear/detailed information?
4. Is there another email supplier that is safer? Under what configuration exactly?
