default 'Hide my email' alias leaks website name to Proton
By default the Pass Extension will prefix the website name in the aliased email address. For example uservoice.pacify917@aleeas.com for this website.
Since Proton / SimpleLogin need to route this alias it will remain readable to those systems - revealing the websites that a user has accounts on (uservoice in the example above).
The prefix is unnecessary since it could be stored in the E2E metadata of the Alias entry or via a linked ProtonPass Login entry instead of in the email address.
The current work around is to create the alias manually and modify the prefix. It would be very handy to have this more private option as default in the popup.
jroddev
shared this idea
-
anthony
commented
A workaround until this feature is worked out, just use the Simple Login browser extension instead. That one gives you more control over the generated aliases and even lets you search for ones you already made.
-
anthony
commented
The simple login integration is effectively the tie breaker between proton pass and bitwarden and this is the only blocker to actually using it. Without the ability to create aliases quickly via the proton pass extension there's no reason for me to switch since I'll have to open up proton pass manually anyway to create them. I would like to switch though.