I imagine a bad actor could buy a custom domain, connect it to proton, and then spam millions of people from thousands of addresses, using Proton’s infrastructure?
You could do that without creating thousands of addresses; one is plenty for that. Also, they’d still be under your domain, so all you’d do is hurt the custom domain’s reputation and probably get it blocked by everyone quite quickly. If anything, I’d imagine thousands of addresses under one domain spamming would get that domain banned much more quickly than if it was just one address.
What is the # limit on a custom domain?
There is no specific limit for addresses on custom domains; it’s one global limit of 15 addresses, no matter which domain they’re under.
You could do that without creating thousands of addresses; one is plenty for that. Also, they’d still be under your domain, so all you’d do is hurt the custom domain’s reputation and probably get it blocked by everyone quite quickly. If anything, I’d imagine thousands of addresses under one domain spamming would get that domain banned much more quickly than if it was just one address.
There is no specific limit for addresses on custom domains; it’s one global limit of 15 addresses, no matter which domain they’re under.