AliasMailTidak Perlu Mendaftar10-Minute Auto Penghancuran DiriZero Log dan Zero Tracking100% Gratis SelamanyaGenerasi Alias InstanArsitektur Utamakan PrivasiRendering HTML AmanPegangan Nama Pengguna KhususAkses Seluruh DuniaAliasMailTidak Perlu Mendaftar10-Minute Auto Penghancuran DiriZero Log dan Zero Tracking100% Gratis SelamanyaGenerasi Alias InstanArsitektur Utamakan PrivasiRendering HTML AmanPegangan Nama Pengguna KhususAkses Seluruh Dunia
📱 Media Sosial

Masked Outbound Webhooks.Hide origin IP & sign payloads with HMAC-SHA256.

Stream incoming emails to user-configured webhook endpoints through Cloudflare Edge Relay. Conceal backend server IP address, protect against SSRF, and verify payload authenticity.

📬 Buka Kotak Masuk Sekali Pakai📂 Peta Situs
Artikel Panduan

3-Layer IP Masking & Cloudflare Edge Relay Architecture

Direct outbound webhooks from backend servers expose origin IP addresses in destination server logs, leaving cloud infrastructure vulnerable to tracing and targeted attacks. AliasMail uses a 3-Layer Edge Relay architecture powered by Cloudflare Workers to proxy outbound webhook requests.

HMAC-SHA256 Payload Signature Verification

Destination servers only log Cloudflare edge IP addresses (104.28.x.x / 2400:cb00::), completely concealing backend NestJS server IPs, hosting providers, and internal topology.

SSRF Protection & Subnet Security Guards

Every webhook dispatch includes an HMAC-SHA256 signature header (X-AliasMail-Signature) computed using Web Crypto API. Recipients can verify signature authenticity using their custom secret key while receiving sub-50ms real-time email payloads.

Kategori

📱 Media Sosial

Tags

#masked webhook delivery#outbound webhook ip masking#hmac sha256 signing#cloudflare edge relay#ssrf protection
Pertanyaan yang Sering Diajukan

Semua yang Perlu Anda Ketahui

Semua yang perlu Anda ketahui tentang email sementara dan arsitektur tanpa log kami.

01How does masked webhook delivery hide my origin IP?
Outbound webhook requests are routed through a Cloudflare Worker relay. The destination server sees Cloudflare edge IPs, keeping your backend server IP completely hidden.
02How do I verify the HMAC-SHA256 signature in my code?
Calculate HMAC-SHA256 of the raw request body using your secret key and compare it with the X-AliasMail-Signature header.
03Are internal subnets protected against SSRF?
Yes. The relay inspects destination URLs and blocks requests targeting localhost (127.0.0.1) and private RFC 1918 subnets (10.0.0.0/8, 192.168.0.0/16).