Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

1
vote
2answers
47 views

Is it possible to digitally sign an email twice?

User A encrypts an email with the public key of user B and digitally signs it. User B receives this message and decrypts it. B wants to forward it to user C, encrypts it with C's public key and signs ...
5
votes
1answer
363 views

PGP-encrypted Email or SSL/TLS Webform for Responsible Disclosure Communication?

So it's a fairly simple question. When offering an avenue to security researchers for communication with us regarding disclosure of security vulnerabilities, what's the best way to do so? Assume we ...
1
vote
1answer
46 views

How to secure/cleanup my accounts after having an old email account breached

I have two email accounts. My main one that I created a few years ago and switched to, which has a very strong/unique password that is not written down or stored anywhere. It also has 2-factor auth ...
6
votes
3answers
48 views

How can you prevent email addresses from being harvested from a registration form?

When you go to a website's login form and enter the wrong credentials, the website can give you one of three error messages: Your email is wrong Your password is wrong Your email or password is ...
0
votes
1answer
60 views

Is the following e-mail fraud technically possible?

Summary: Can email be intercepted and modified by a 3rd-party during transit from the sender to the receiver? If so, can this interception be detected? Details: My friend (A) (mailbox at popular ...
54
votes
11answers
11k views

Why would a spammer try to get a (normal) image of mine?

Yesterday I found a spam mail in my inbox. I inspected it in order to find out why DSpam and SpamAssasin failed. You can find the raw German mail here, here's a translation: Good Morning. We got ...
12
votes
3answers
2k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
-2
votes
0answers
17 views

detect forged e-mail system for windows? [on hold]

some instances people send emails with false or "forged" headers. How can detect forged e-mail? (some program in windows)
3
votes
3answers
292 views

How do web email clients store my passwords from other providers?

The situation comes down to this: When I enter in hotmail, it retrieves my messages connecting to other providers: they could only do so by using my email and password. Since I had signed in a ...
25
votes
4answers
16k views

What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?

I would like to ask what happens when an email is sent from gmail, yahoo or hotmail public web email services? I don't understand email protocols in details, but as far as I know email traffic is ...
5
votes
3answers
29k views

Someone keeps using my email address. What to do?

I have had a GMail ever since it was created, so it's an email address that is easy to remember, but also easy for somebody else to get confused with. Since I'm not going to post my email address ...
5
votes
1answer
119 views

I emailed someone a picture of a check I wrote for them. What now?

On a whim, I emailed the intended recipient of a check I wrote a picture of that filled-in check to indicate I was about to mail it out. The full front of the check, with amount, my signature, account ...
51
votes
6answers
9k views

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
0
votes
1answer
41 views

Where can emails be sniffed from? [duplicate]

I understand that you should not send private information in emails due, in part, to the fact that this traffic is usually unencrypted and can therefore be sniffed while in transit. Where would a ...
1
vote
1answer
45 views

Is it possible to prove that a forwarded email has been tampered with prior to being forwarded?

I have requested that an old email exchange between myself and HR be forwarded to me by a previous employer. They complied with the request but I suspect that the body of the exchange which they ...
2
votes
0answers
45 views

How Vulnerable Is An Older Version Of Outlook As An Email Application?

I am significantly displeased with some of the newer versions of Microsoft Outlook. I would prefer to continue using my older version from Office 2000 (on Windows 7 using workarounds). As a networked ...
2
votes
2answers
83 views

TLS capable SMTP store-and-forward server — does it have to store private keys?

I know that email is inherently insecure anyway, but considering that pretty much everyone that I send email to is using a large, somewhat-trusted cloud provider, (hint, starts with G) I would expect ...
9
votes
4answers
2k views

Hashcash, is this really used?

I just heard about this term, is it really used? The concept does not seem new, is it used and/or implemented in current technologies?
6
votes
1answer
195 views

Bank Has Emailed My Social Security Number

I'm in the middle of getting a mortgage. Just now, my bank sent over an e-mail (sent to my Gmail account) with a bunch of .pdf attachments of documents I'm supposed to sign and return. The first ...
13
votes
6answers
3k views

Is it a security issue to allow nearly identical email addresses when registering?

Say you have a website where it is possible to create accounts for all of the following email addresses: 'test@test.com' 'test@test.com ' 'test@test.com;' 'test@test.com;test2@test.com' Should this ...
16
votes
7answers
10k views

Forgotten password or reset link, which is more secure to email?

I originally posted this as a reply here in this thread but didn't get much feedback on it, and now I'm curious as to what others think is the best approach, or if there is any difference between the ...
4
votes
1answer
142 views

Possible for Lync (Skype for Business) to adopt Activesync-style policies?

My compliance manager recently told me that Lync IMs should be treated as e-mail for compliance purposes. This also made me realize that our other email policies (encrypted device, pin required, ...
3
votes
2answers
83 views

How to view e-mails without internet connections?

If I want to make a secure PC that has zero network connection, how can I view my e-mails on it? Are there any tricky solutions to still view my e-mails while I have no network connection? And all ...
1
vote
3answers
88 views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...
0
votes
5answers
248 views

My email hacked

Someone has definitely gained access to two of my alternate emails. I know this by looking at the login activity. By looking at the email logs I discovered that the IP that is always gaining entry to ...
0
votes
1answer
127 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
3
votes
1answer
70 views

I am getting mail from cron daily and can't identify the source

I am getting a mail from crontab and can't identify the source of it. My site is brand-new so I am not sure what this is doing or its purpose. Is it some hack? <html> <head> <META ...
0
votes
1answer
47 views

Mail server security: Mails to internal receivers with faked sender address

I noticed that I am able to send emails from my company's mail server to internal receivers from faked inhouse sender addresses without problem and I'm wondering if this should be supposed a security ...
3
votes
4answers
162 views

Can my computer get infected if I hover the mouse to check the thumbnail of an e-mail attachment?

So, today an user sent me an e-mail about a suspicious e-mail. When I opened it to check it, I accidentaly hovered the mouse over the "doc.jpg" and it opened the image thumbnail. I never bothered to ...
12
votes
2answers
8k views

Is email encryption, as claimed by ProtonMail, possible?

Is it possible to create a Web service that encrypts all messages, such that only the writer, and the person to whom the mail is sent, can read it? In other words, is the theory behind ProtonMail ...
17
votes
10answers
6k views

Encrypting email for gmail

My friend who is an accountant was asking me what the best way to exchange documents with clients. He was trying to tell me that just sending via email was sufficient and I told him he was insane. I ...
0
votes
1answer
38 views

How do country's block politically charged spam? [closed]

I have a friend who is returning to China shortly, and I wanted to stay in touch with him so I got his email address. I was wondering what precautions does China (or any other dictatorial regimes for ...
3
votes
3answers
270 views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
1
vote
0answers
30 views

What informations leaks during send mail programatically from google account [closed]

Imagine if you are sending an email by the gmail.com using web online interface so entering the website of google, then compose mail and send it. In this case your ip address is not revealed to the ...
6
votes
3answers
1k views

How to prove someone sent an email to you?

There are similar question about how to prove YOU sent an email, but I want to know if it is possible to prove a 3rd party sent an email to me. An individual sent some very threatening emails to my ...
3
votes
3answers
9k views

Yahoo Account hacked, changed pw, spam still going out elsewhere?

Spam emails went out for an hour earlier this week bearing my Yahoo account in the FROM field and going out to all my contacts. I changed the password, then saw (via rejected emails sent to my Yahoo ...
0
votes
0answers
18 views

Raspberry IP email on boot bypass [migrated]

I have configured my Raspberry Pi2 B+ to send an email through SMTPS (smtp.gmail.com:587) after the boot with the IP address of eth0 and wlan0. So Usually the eth0 will obtain an IP address by the ...
6
votes
1answer
63 views

iOS Mail App Security

I have my own domain name and I had some issues with the delivery time. So, I started looking at the mail header to see where my mail was stuck and why. That is not the issue.. While messing around ...
24
votes
7answers
39k views

Is it still unsafe to email credit card number nowadays?

We all know not to do it, but someone emailed my credit card number and cvv code to my gmail. I'm wondering if the risk is so low I don't have to call to cancel my card. The email is sent from a ...
0
votes
1answer
33 views

Email address used by someone else to order on line [closed]

Someone, or however it's being done, is ordering things from all over the internet, using my son's old email address. He no longer uses that address, however, they are placing orders to our address. ...
1
vote
2answers
57 views

Malicious email attachments analysis

I have a question regarding incoming emails with malicious attachments on my email server. So, my idea, in my ideal setup, is to have a machine aside running virtualization software. This would run ...
5
votes
4answers
3k views

CAPTCHA or email confirmation?

I have read that captcha isn't a perfect solution to protect a website where for example the user can create an account, since there are many people in different countries that practicallty read ...
1
vote
2answers
64 views

Use DANE to authentify mail sender

I have my own virtual DNS infrastructure, from the root to the mail server mail.example.com. Everything is signed using DNSSEC. client1@example.com can send email to client2@example.com, digitally ...
9
votes
2answers
77 views

Best practices when forwarding an email or copy / pasting from confidential information sources?

I get asked this a lot from older people, or for legal matters. They want to forward an email message they've received to another party, while removing any identifying information from the first party ...
3
votes
1answer
48 views

Access via link in Email - How can I make this most secure?

I need your professional opinion on this matter, please. The app I'm building has 2 parts: Teachers & students. Teachers use the app to build a project and attach students to it. Then, the ...
2
votes
0answers
69 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
-4
votes
2answers
106 views

Can forensic investigators find my webmail emails in my laptop?

When I send an email using the web interface of Yahoo Mail or Gmail, can the email can be found somewhere (even if encrypted) on my laptop by forensic investigators? Somewhere on my hard drive or RAM? ...
3
votes
3answers
124 views

Is it safe for web application to receive and parse emails?

I am not sure, if this question needs to be narrowed down to web applications only, but that is my particular interest. Suppose a web application receives (retrieves from mailbox) emails, parses the ...
1
vote
1answer
40 views

Social engineering attacks terminology

Let's suppose that a hacker send an email containing a Word document with a malicious macro to a sysadmin. Does this attack fall under the category of spear phishing?
3
votes
1answer
37 views

Can STARTTLS protect emails between two organisations?

There are a few threads on STARTTLS but none seem to provide a clear overview of what STARTTLS can and can not do with respect to encrypting email in transit. So my question is, can STARTTLS be ...