Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

0
votes
2answers
24 views

Spam mails originating from botnet

Background I am working on spam detection at the receiver side,i.e where all mails are delivered,i.e at the mailserver side. Spammers are capable of sending spam mails through Bots,Open relays and ...
2
votes
1answer
28 views

Is it safe to rely on email address from 3rd party identity provider?

Assuming that a 3rd party identity provider is reliable (eg; Facebook, Google, WindowsLive), is it safe to use email address (as provided by the service) to connect a user logging in with different ...
1
vote
2answers
24 views

Are two DNS MX records pointing to the same IP a availability risk (single point of failure)?

Are two DNS MX records pointing to the same IP a availability risk as in a single point of failure (SPOF)? Even if there are three DNS MX records in total for example: mx1.example.com 192.168.1.1 ...
-1
votes
0answers
31 views

Yahoo email origin syntaxes

I have several e-mails from a friend with the first (bottom-most) receive line in the general form of: Received: by 66.196.81.106; Tue, 10 Nov 2015 17:41:33 +0000 Date: Tue, 10 Nov 2015 17:41:30 +...
0
votes
0answers
26 views

Is my mail web service secure? [duplicate]

I am using the mail.com web service and I cannot understand if it is secure enough. When I log in by entering my username and password, it redirects me to another page which is https and my browser ...
3
votes
2answers
325 views

My friend was fired from her job. Overnight, on her personal phone all her work contacts mysteriously disappeared

As the title stated. My friend personal email is connected to her personal phone. She works on the iPad and her work iPad is connected to her work email. She never checked her personal email on her ...
1
vote
1answer
58 views

Is it a security risk, lack of knowledge for reactive action, when abuse mail is rejected?

When inspecting the DNS configuration for example with dnsinspect.com, the following shows up sometimes (note I used example.com): Accepts Abuse Address WARNING: Found mail servers which are not ...
3
votes
1answer
34 views

Is using PGP/MIME or PGP Inline more secure?

Using Enigmail for Thunderbird, the setup wizard automatically sets itself to PGP/MIME and also disables HTML formatting. I am looking for security and have no idea which to use, though I do know HTML ...
4
votes
1answer
118 views

How to de-obfuscate a malicious payload?

I've received some spam email that led to a JavaScript file which I assume is malicious. My curiosity got the best of me so I opened the file in notepad and I'm trying to make sense of the code but I ...
0
votes
0answers
58 views

Why can I login in my Facebook account with an email not the main one? [on hold]

My Facebook account was registered with a Hotmail e-mail. My secondary e-mail is an ISP e-mail. Since I remember I never had other secondary e-mail added. However today, in my laptop, I inadvertently ...
0
votes
2answers
78 views

How am I being scammed?

I have received an email, claiming to be from Microsoft. Here is a snapshot of it: Google marked this email as spam with the following notice: These are some header details: Now, the text of ...
1
vote
1answer
36 views

Hops encountered More for spam Mails than Legitimate Mails

Background I am working with email headers for spam detection. Each E-Mail header contains many "Received:" headers fields. Each "Received:" header is added by an intermediate Smtp/Mail server in the ...
-1
votes
0answers
28 views

Preventing denial of email (Gmail)

Case 1: The attacker is or has access to MITM the ISP(3g/2g). The ISP also happens to be the GSM company. This could be because of police supervision. He is forced to use computer with a backdoor. ...
-1
votes
0answers
26 views

s/mime edit an existing certificate

We are using an encryption appliance that is capable of creating S/MIME certificates for internal users. The appliance is synchronizing with AD to get the user. When the certificate is created it will ...
1
vote
2answers
440 views

Received an email about an “Etsy” Password Reset due to the “Linkedin Breach…” is this a phishing attempt?

I received an email today from Etsy saying they are resetting my password(from the source it looks like a mass reset of all users), due to there being some sort of Linkedin breach, that compromised ...
4
votes
1answer
75 views

Getting subscribers on website from nowhere?

I have a weird question and I hope I am asking in the right place. Recently I checked some statistics on my website after a while and noticed that the number of email subscribers had jumped from about ...
0
votes
1answer
30 views

Google mail - Paypal emails going directly to trash [closed]

Emails coming from paypal go directly to my trash, I noticed this today because i got a mail notification through OSx. However when i went to find the email it wasn't there. After some digging i ...
0
votes
1answer
62 views

How should I handle a spam account I don't control from sending spam emails with my username?

A family member contacted me yesterday saying their email has been hacked and that some other family members received spam emails from their account. For this example, lets say the hacked family ...
2
votes
1answer
67 views

Identify if a certain domain is using Office 365 or Google Mail

I have a list of e-mail domains that i wanted to confirm if they're using Office 365 or Google Mail for mail. Checking MX using Nslookup can do the job but I noted that a few companies will use an ...
1
vote
1answer
80 views

What's the minimal way of sharing your public PGP key in email signature?

What's the minimal (not the entire public key) and secure enough way of sharing your PGP key in an email signature?
1
vote
0answers
19 views

What do I need to do in order to use Enigmail on more than one PC? [migrated]

I've already imported my keys from pc1 to pc2, but on pc2 I always get this error message: Error - no matching private/secret key found to decrypt message; click on 'Details' button for more ...
3
votes
1answer
83 views

Can email services upload files from your computer without your permission/knowledge?

The company I work for is involved in security clearance work, and thus all company computers are monitored (files, screenshots, etc). I am routinely logged onto my company email service with my ...
42
votes
5answers
6k views

Why is end-to-end encryption still not default in mails?

I am not a cryptographer. Maybe that is why I don't see the issues with integrating PGP into SMTP. In my head: Lea requests the server of Luke's domain jedi.com to tell her the public key of luke@...
2
votes
2answers
76 views

Can an email header can be used to verify the real sender? How?

Lets say you're the target an advanced phishing attack, meant to look like it came from Amazon.com. It shows @amazon.com in the sender field, but you're suspicious. You can call Amazon and find out, ...
3
votes
1answer
57 views

Login based on mail domain

I'm trying to make a system where the sign up would be allowed or denied based on the domain of the mail. So let's suppose that only people from company.com are allowed to sign up on that system. ...
0
votes
0answers
30 views

How to record the event that an attachment from Outlook has been clicked to run or downloaded to the disk? [migrated]

I am developing a solution to monitor security events on Windows. Two of the events to monitor are: an attachment from an email (Outlook) has been clicked to run or downloaded to the disk a link ...
0
votes
2answers
61 views

How does an email provider verify my custom domain name?

I'm new to this and I've read a tutorial on this page: http://www.melyssagriffin.com/use-gmail-custom-domain/ The author of the tutorial wrote about her experiences of setting up a custom domain name ...
0
votes
0answers
16 views

SPF block on return-path mail [migrated]

We make use of a unique return-path email on all email sent to track bounce backs and give feedback, but recently we're getting issues where the SPF record fails because people are allowed to send ...
3
votes
2answers
105 views

Confirming an email address with a link

During an onboarding process, I want to confirm a user's email address by sending him a link in the form of a URL followed by a GUID as the parameter: www.somedomain.com?p=GUID What sort of security ...
0
votes
2answers
21 views

Reconcile IMAP4 RFC with No RC4 RFC

RFC 3501 states: IMAP client and server implementations MUST implement the TLS_RSA_WITH_RC4_128_MD5. RFC 7465 states: o TLS clients MUST NOT include RC4 cipher suites in the ClientHello ...
-3
votes
1answer
72 views

Spam email sent to my contacts pretending to be me.

I just found out someone has been sending spam emails to my contacts. I first thought that my account was hacked, but the emails aren't coming from my account but from a weird email address (my name ...
2
votes
1answer
50 views

OpenVPN Client Id appearing in emails

I use OpenVPN to connect to a server. I just found that in a series of emails I sent and received to and from the same person the following line appeared after every message I sent: [cid:{a long ...
0
votes
0answers
20 views

Spam mail header Analysis [migrated]

I have downloaded spam dataset ,as i am working on spam detection. Below is a snapshot of Email header received. Received: from localhost (localhost [127.0.0.1]) by phobos.labs.netnoteinc.com (...
1
vote
1answer
53 views

Does putting in quarentine attachments with two dots increase security in Outlook 2010?

Outlook 2010 and antispam systems already forbid executable attachments. In this scenario, does putting attachments with two dots in quarentine increase security? Attackers used to use this technique ...
1
vote
1answer
38 views

Would the following practice make email PCI compliant?

If a system applied to the following three practice/technologies to each e-mail, would it rate as PCI compliant? The email itself is encrypted Encryption is applied end-to-end in the transport layer ...
0
votes
3answers
440 views

Email from supposedly Apple (mycloud.ssl.com)

I got an email where it says that Apple recently failed to validate my payment information and therefore they need to ask me to complete a short verification process in order to verify my account. At ...
14
votes
15answers
697 views

Sending password reset links in email

Nowadays, when everyone tries to be more secure then each other, when companies spend billions on information security, it seems a little bit odd that the password reset left behind, the place that, ...
0
votes
0answers
37 views

Certificate not showing up for signing in Outlook

I have a new ECA certificate installed on my Windows 7 machine, but when I use Outlook it is not letting me change the signing certificate to the new certificate, but it does let me change the ...
3
votes
3answers
189 views

Sending sensitive infromation via self destructing link in an email

I need to come up with a simple way for people within the company to send out arbitrary sensitive information to arbitrary recipients. There is an equal chance that the sender and recipient will be ...
2
votes
2answers
219 views

How to tell if an email is encrypted, or just corrupted?

Ran a recovery program (Kroll Ontrack) on a Windows 7 PC and recovered many, many emails. Almost all of them open in my Windows 10 mail client (and Thunderbird), except for a handful from this March. ...
2
votes
1answer
47 views

Are there any standard practices for protecting against malicious links being entered in a public form?

A website I'm working on needs to have a form for any visitor to submit a request for information about a service. The user will not need to create an account, and contact details are just part of the ...
0
votes
1answer
142 views

Is it safe to be showing my WAN and LAN IPs in my email headers?

I don't know how to hide my LAN IP from my email recipients. My LAN IP shows up next to my WAN IP in my outgoing email headers (sent to my other accounts and viewed by me). I have not seen emails sent ...
0
votes
1answer
81 views

Email sending out spam to many contacts

I'm asking on behalf of a friend. A few days ago, I received a email with his full name (with no subject), thought that's from him. But when I opened it, there was only an obvious spam link, and I ...
2
votes
1answer
78 views

Can I trust Google Scripts on sites like Labnol?

For example, consider this script. It requires me to grant permission to my Gmail account, but I'm confused why this is necessary -- is it not myself who is running the script? Or is my data going ...
8
votes
3answers
276 views

Is it enough to look at the sender's email address?

I use Gmail. When I receive an email, Gmail displays the sender's email address. So far I've always looked at this address when receiving sensitive mails, to avoid phishing. For example, I know by ...
1
vote
2answers
203 views

Is this a legitimate Microsoft email or is this a Phishing email and how can I tell?

I am a mobile application developer using Microsoft Azure with my MSDN subscription to develop my back-end of the application. Today I got the following email: So given my above background this ...
206
votes
15answers
10k views

Tracing the location of a mobile IP from an email

I'm a TV scriptwriter - and not hugely tech-savvy, so please bear with me... If the police have an email, sent by a suspect over a 3G or 4G network, could they use the IP address (since they know ...
2
votes
3answers
143 views

Emailing debit card details to a guesthouse

I'm trying to arrange a holiday out to the Aran Islands, and the guesthouse emailed me back confirming that they do have a room available. But here is the catch: they want me to email my credit card ...
3
votes
1answer
247 views

Why does my SHA256 certificate get encrypted with 168 bit 3DES?

We use S/Mime certificates for internal emails within our company. The certificates signature algorithm are all SHA256RSA with a hash of SHA256. I have confirmed the public keys are RSA(2048bits). ...
0
votes
1answer
67 views

Avast attempts to connect to the Internet when I try to download email [closed]

The file AVAST (Software\Avast\AvastSvc.exe) tries to connect when I check my email. When I forbid access to the internet for AvastSvc.exe, I can't connect to POP3 & SMTP. I'm not sure where all ...