Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

0
votes
1answer
42 views

“Secure” emails from unfamiliar source(s)

The context is long, so I'll ask my question first. If an encrypted message is received from an unfamiliar sender and it's spam, how can I avoid receiving further messages of the same sort? If it's ...
3
votes
2answers
39 views

Must mail relays always indicate the use of encryption in the “Received:” header field?

When an email message is sent with transport encryption, you can tell it from the “Received:” field the receiving mail relay adds to the message header. > Received: from [...].google.com ([...]) by ...
4
votes
2answers
70 views

Should I email contents of a https form submission

I am building an online registration form for a voluntary organisation in the UK and am considering data security measures. The form will be served up over https and there may be an optional payment ...
8
votes
2answers
698 views

ProtonMail security concerns

This TED talk brought me here. First of all, to those who created ProtonMail: Nice job!!. Regardless of what people say, it's definitely a big step forward from tradition options like Hotmail, Gmail ...
3
votes
1answer
122 views

Prove ownership of a GMail account

Is there a way for a person to remotely and irrefutably demonstrate ownership of a Gmail email address? I've considered using DKIM signatures, but this has problems: PGP Key Signing Robot DKIM ...
1
vote
2answers
49 views

PGP Key Signing Robot DKIM Verified Emails

It occurred to me that DKIM verified emails, from major players (e.g., GMail), could open the door to more modern OpenPGP robot key signing authorities. The idea would be to ask people to send a key ...
3
votes
2answers
495 views

Suspecious js file sent as email attachment

I received a js file with following code in my spam folder but I decided to take a look into the file. Do anybody of you know what does this code might do? var evl='';function nr() { evl = '}; ' + ...
33
votes
7answers
5k views

Is it illegal to read an e-mail that was accidentally sent to you?

I'm not sure if this is the right website to ask this but I'm giving it a shot. I got the following message in an email today: (it's translated so sorry for the typo's/mistakes) This e-mail and ...
11
votes
5answers
3k views

How can I help catch an email scammer who is contacting me?

My friend's GMail account was recently hacked and the perpetrator sent out one of those classic "help I was mugged, I need money" style e-mails. (Edit: I know it's legit; my friend called me to tell ...
6
votes
4answers
4k views

How should I react to finding GMail outbox e-mails that I didn't send?

This morning I found 17 e-mails in my GMail outbox that I didn't send. The e-mails were sent to seemingly random people from my GMail contacts and contained the link to a suspicious php file on ...
1
vote
2answers
278 views

Using email as individual validation

My company often sends orders to brokers and banks to execute certain actions (like buying x stock or y fund). In order to reduce bureaucracy we are considering send a list of emails that are allowed ...
3
votes
2answers
228 views

S/MIME certificate expired and renewed, do my correspondents have to do anything?

My PKI certificate (Digital ID for email from Symantec, issuer is "VeriSign Client External Certification Authority - G3") expired after 1 year and so I have renewed it. Do the people I correspond ...
1
vote
1answer
61 views

Access to email without antivirus [duplicate]

I am doing a test where we want to asses whether an email with a benign virus in it, exits a network. I need a means to receive the test emails I am sending from inside the network, without any ...
-1
votes
1answer
68 views

“FROM” mail spoofing [duplicate]

I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
1
vote
2answers
2k views

How is mail automatically sent from my account?

Today I have received an email with an 'out of office' notification, as a reply to one of my emails, which I actually didn't send. I think it was sent automatically from my address, as a result of ...
1
vote
2answers
70 views

How to encrypt data in email body sent by (offline) app and decrypt on server

I've build an (offline)app (HTML/JS). The app allows the user to write a report (event when he is offline). The data from the report is sent via the body of an email to the companies special email ...
0
votes
0answers
19 views

Metadata and Adding Files

If a person had files they wish to add to a computer and had physical access to the computer could the docs or emails be added with false metadata to indicate the documents had been added at a ...
2
votes
3answers
76 views

Dedicated domain for email registration

With the recent surge in compromised user information on web services, I have the following solution in place for myself: Registered a domain with an obscure domain name. (actually a bunch) One ...
14
votes
3answers
5k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
1
vote
2answers
161 views

Is this some sort of scam or do I have stalker?

Sender: msmith11@mail.com Emails are from IP address:74.208.4.200 Emails are weekly. all text, no links, no images. Some Depict sexual fantasies in high detail directed to a female - which I am. ...
0
votes
3answers
165 views

What stopping someone from offering distributed and encrypted email? Just like Bitcoins

Basically Email service that is ran over a network, so it's not owned by any one entity. Everyone can use it and send email to someone else. All messages travel through a web of interconnected ...
5
votes
1answer
781 views

Is it safe to email the contents of your .htaccess?

If you assume that you're not on HTTPS or that, at least, the security of your connection is compromised, is it safe to email someone the contents of your site's .htaccess file? I'm a novice in this ...
0
votes
2answers
78 views

How to know when to install a certificate?

How do you actually know when a certificate is issued that your system doesn't recognize, whether to trust it or not? When I was setting up Outlook for Gmail I got prompted to install the following ...
-1
votes
1answer
34 views

Signed E-Mail certificate invalid [closed]

I sent a valid signed e mail a few weeks ago. Now I reinstalled everything on my computer (including the OS). Is the certificate now invalid?
13
votes
4answers
14k views

How (in)secure is POP/IMAP/SMTP

I'm making a few assumptions about basic email security, and I want to confirm or clarify some of these points to make sure I understand the big picture. Please correct me where I'm mistaken: The ...
1
vote
1answer
91 views

Login on public Wi-Fi networks using HTTPS [duplicate]

Is it safe to log in to my e-mail account with my iPad's Safari through a public Wi-Fi network (let's suppose someone is eavesdropping the traffic) provided that the e-mail provider uses HTTPS?
4
votes
3answers
300 views

Storing credit card information for later manual processing

I am rebuilding a clients eCommerce site using Wordpress and WooCommerce as the framework. Their current eCommerce site takes the credit card information and stores it for later manual processing. To ...
26
votes
6answers
18k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
5
votes
1answer
689 views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
2
votes
1answer
39 views

How do we 'initiate' mail exchange with PGP

I am totally new with PGP, and I would like to know how I can initiate a mail exchange with it. I created my public/private keys, and posted my private key on the MIT PGP Public Key Server. I can ...
3
votes
3answers
212 views

Reading encrypted data before sent to remote server

I'm developing a mobile app (Android only for now) to provide a disposable e-mail service to users. Users will be given temporary e-mail addresses so they can receive and read e-mails for a certain ...
1
vote
2answers
55 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

We have our Exchange server in a remote site administered by an external provider. We would like to avoid the possibility of provider employees to access the email and calendar of critical accounts in ...
3
votes
4answers
3k views

Yahoo Email Keeps Getting Phished

I keep getting spam emails from myself (and I am sending them to others as well) on my Yahoo Mail account. I have already went through two password changes which I thought were secure. My very last ...
2
votes
3answers
271 views

Are file attachments “unsafe”?

The management at work are asking, "How can we send files easily and safely to each other?", arguing that: Putting attachments in email is not safe. They want to send links instead They want to ...
4
votes
1answer
90 views

Asking for Password After Email Validation?

I do not want to discuss the pros and cons of email validation, but want to know if there are any potential downsides (security and otherwise) to a user entering his password only after he has already ...
6
votes
2answers
5k views

Yahoo mail hacked - how to recover, how did it happen and how to prevent?

I was yesterday informed by some friends that they received spam mails with my name as sender. The sender addresses look like firstnamelastname@spacepc.pt and firstnamelastname@revistaplot.com with ...
0
votes
2answers
45 views

Emailing spoofing

I've got 2 macs on a home network, as well as an iphone. I've got my own domain on Godaddy set up with an SPF record. I've changed the password on my account. But emails are being sent using my ...
4
votes
2answers
188 views

What do I do about a forgotten, ancient PGP key?

So I just created a new PGP key because I want to start using PGP to encrypt my emails. Lo and behold, this is apparently not my first attempt to use PGP. Five years ago, I created another PGP key ...
5
votes
1answer
67 views

Should I have special emoticon handling for compliance, audit and logging?

I'm required to audit various communications (email, sms, messenger, social media) for keywords relating to financial data, HIPPA, and other PII. Is there any rational reason I should extend my ...
56
votes
3answers
6k views

Why do email programs block xml files?

A colleague sent a .xml file to me earlier today, which was blocked by Outlook. As we were discussing the workaround (put it in a .zip), we got to wondering why .xml files are blocked. My colleague ...
15
votes
5answers
3k views

Why would someone want to block images in email?

While there is the possibility that this is just to prevent people from viewing offensive images against their will, somehow I don't think that's the reason why pretty much every email client defaults ...
5
votes
1answer
121 views

Phishing message in Outlook signature?

One of my organization's users just showed us an interesting problem: every message they tried to send (in OWA 365) contained the following scary text: Your mailbox has exceeded one or more size ...
-2
votes
1answer
137 views
2
votes
1answer
36 views

What is the point of sending an email informing a possible break in to the same account?

There are several email services, including Gmail that for some time now sends an email informing that someone logged in from a different device. An attacker, logging into that account would also ...
1
vote
0answers
94 views

What vulnerability is this malicious document attempting to exploit

CLARIFICATION: I changed the title as people were interpreting this as a request to help understand the code. I explain what the code is doing below (critiques on this analysis are welcome.) I am ...
7
votes
2answers
354 views

Is a mail secure if it's PGP-encrypted, but unsigned when sent with DKIM?

I run my own mail server and would like to use different addresses on the same domain. If I were to sign mails from those addresses, I'd have to generate new PGP keys for each and every one of them. ...
4
votes
1answer
70 views

mailto email headers trace IP

So I'm working on a defamation case. So I will make a little overview of what is going on. The person we are trying to trace is using a site like kijiji. Tomorrow I am heading to the so said kijiji ...
1
vote
1answer
118 views

how to track IP address from which mail has been sent?

I am from India. I have get few mails from some random Gmail ID. How to get the information from which IP address it has been sent ?
6
votes
1answer
330 views

Gmail lets me use my old password

My university's email works through Gmail and I can log on to it either through my uni's website or in Gmail. I recently changed my password and I use it to log in to the schools secure WiFi, school ...
3
votes
2answers
156 views

How to give “Forgot password” option for a password encrypted file?

I have created a utility that encrypts a file (.txt, .dox, so on...). The utility asks for a password from user at the time of file encryption. Problem Suppose a user has created 1000 encrypted ...