Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

2
votes
1answer
100 views

Login on public Wi-Fi networks using HTTPS [duplicate]

Is it safe to log in to my e-mail account with my iPad's Safari through a public Wi-Fi network (let's suppose someone is eavesdropping the traffic) provided that the e-mail provider uses HTTPS?
2
votes
1answer
43 views

How do we 'initiate' mail exchange with PGP

I am totally new with PGP, and I would like to know how I can initiate a mail exchange with it. I created my public/private keys, and posted my private key on the MIT PGP Public Key Server. I can ...
1
vote
2answers
59 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

We have our Exchange server in a remote site administered by an external provider. We would like to avoid the possibility of provider employees to access the email and calendar of critical accounts in ...
3
votes
3answers
787 views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
4
votes
1answer
103 views

Asking for Password After Email Validation?

I do not want to discuss the pros and cons of email validation, but want to know if there are any potential downsides (security and otherwise) to a user entering his password only after he has already ...
0
votes
2answers
47 views

Emailing spoofing

I've got 2 macs on a home network, as well as an iphone. I've got my own domain on Godaddy set up with an SPF record. I've changed the password on my account. But emails are being sent using my ...
4
votes
3answers
412 views

Storing credit card information for later manual processing

I am rebuilding a clients eCommerce site using Wordpress and WooCommerce as the framework. Their current eCommerce site takes the credit card information and stores it for later manual processing. To ...
5
votes
1answer
75 views

Should I have special emoticon handling for compliance, audit and logging?

I'm required to audit various communications (email, sms, messenger, social media) for keywords relating to financial data, HIPPA, and other PII. Is there any rational reason I should extend my ...
57
votes
3answers
6k views

Why do email programs block xml files?

A colleague sent a .xml file to me earlier today, which was blocked by Outlook. As we were discussing the workaround (put it in a .zip), we got to wondering why .xml files are blocked. My colleague ...
-1
votes
1answer
467 views

What is the difference between X-Received and Received in email-header? [closed]

Also how to calculate delay between sent and received?
2
votes
1answer
40 views

What is the point of sending an email informing a possible break in to the same account?

There are several email services, including Gmail that for some time now sends an email informing that someone logged in from a different device. An attacker, logging into that account would also ...
1
vote
0answers
107 views

What vulnerability is this malicious document attempting to exploit

CLARIFICATION: I changed the title as people were interpreting this as a request to help understand the code. I explain what the code is doing below (critiques on this analysis are welcome.) I am ...
7
votes
2answers
361 views

Is a mail secure if it's PGP-encrypted, but unsigned when sent with DKIM?

I run my own mail server and would like to use different addresses on the same domain. If I were to sign mails from those addresses, I'd have to generate new PGP keys for each and every one of them. ...
3
votes
1answer
100 views

mailto email headers trace IP

So I'm working on a defamation case. So I will make a little overview of what is going on. The person we are trying to trace is using a site like kijiji. Tomorrow I am heading to the so said kijiji ...
1
vote
1answer
152 views

how to track IP address from which mail has been sent?

I am from India. I have get few mails from some random Gmail ID. How to get the information from which IP address it has been sent ?
6
votes
1answer
599 views

Gmail lets me use my old password

My university's email works through Gmail and I can log on to it either through my uni's website or in Gmail. I recently changed my password and I use it to log in to the schools secure WiFi, school ...
3
votes
2answers
179 views

How to give “Forgot password” option for a password encrypted file?

I have created a utility that encrypts a file (.txt, .dox, so on...). The utility asks for a password from user at the time of file encryption. Problem Suppose a user has created 1000 encrypted ...
0
votes
1answer
45 views

What information should be scrubbed before posting email headers in public?

To figure out a problem, I need to post mail headers on a public forum, I read What information can be gained from an Email Header? but I'm not sure what information can identify me personally from ...
5
votes
2answers
226 views

Is it possible to infect an e-mail by accident?

Sometimes, my friends send me e-mails. I know that they don't care that much about computer security (while I care). I know that they don't know how to create an infected e-mail (no reason for doing ...
2
votes
1answer
49 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
2
votes
2answers
102 views

TLS capable SMTP store-and-forward server — does it have to store private keys?

I know that email is inherently insecure anyway, but considering that pretty much everyone that I send email to is using a large, somewhat-trusted cloud provider, (hint, starts with G) I would expect ...
-1
votes
1answer
69 views

Server is Sending Spam

I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses). How can I determine what's compromised? Does the attacker know my SSH password? ...
1
vote
1answer
55 views

What is a viable time-frame for links that expire? [closed]

Links that expire can be found anywhere from Email Verification to Password Reset procedures, I understand in most cases this is considered "security theater", but wanted to know what a viable ...
0
votes
1answer
209 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
0
votes
1answer
48 views

User account password encyption by web based emails service providers?

Do web based email providers like Gmail, hotmail encrypt user account passwords when saving them to their database? If they do, why does account information get leaked after a hack?
1
vote
2answers
104 views

Email used to log in but doesn't have to be unique. Issues?

I've moved onto a project where they are implementing a system whereby a user's email address can be used multiple times by different people - i.e. users can sign up as many times as they want with an ...
1
vote
2answers
199 views

A secure alternative for e-mail

I am looking for an alternative for my current e-mail provider (gmail). I would like to gain back a little bit more "privacy" on the internet. I would like the following things: The e-mails I send ...
-4
votes
1answer
161 views

What is the purpose of viagra spam? [closed]

We all have gotten them: The reflection of your size will stay forever in her eyes. Bigger pen!s gives you a bunch of benefits! I have girls that ring me for sex now, its amazing! Judging by ...
5
votes
4answers
2k views

Security of faxes vs emails

Background The other day a friend who works in healthcare asked me which method of communication was more secure, faxing or email. He qualified his question by saying that his office faxes patient ...
0
votes
1answer
66 views

Is it possible to forge email info in header?

I recently received an email from a guy making me a job offer for a big government company and stating that he works there. However instead of using the domain of the company, he is using GMail. ...
5
votes
1answer
2k views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
0
votes
1answer
45 views

Changing senders, same spam messages

We have a situation at work regarding to our mail filtering appliance and I was hoping that you could give us some insight on how to approach this issue. We've been receiving spam emails with the ...
3
votes
2answers
763 views

PayPal “Confirm your email address” spam emails? I got 3 different mails within 10 hours

I got 2 emails within 12 hours containing the following: Confirm your email address Hello [Name] [Name], Confirm your email address now to let us know it really belongs to you. Once ...
4
votes
1answer
62 views

Implemented DMARC, getting reports of canonical.com sending spam - has Ubuntuone been hacked?

I have implemented DMARC on my mailserver and for the first time I'm getting reports of an IP address trying to fake me as the email sender: >record> >row> >source_ip>91.189.90.7>/source_ip> ...
-1
votes
3answers
110 views

Are 21 characters enough to restore a PGP key?

The german e-mail hoster web.de offers PGP encryption with Mailvelope now. To transfer your private key to another browser, you can use a 21 characters long recover key. How does this affect the ...
0
votes
1answer
61 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
-1
votes
1answer
437 views

SQLMAP --OS-SHELL error [closed]

root@kali:~# sqlmap -u http://www.a***********.com/info.php?id=2 --os-shell _ _ _| |_____ _ {1.0-dev-nongit-20150907} | -| . | | | .'| . | || |||||,| | || |_| ...
0
votes
1answer
63 views

How much information, at maximum, can a phisher/scammer obtain?

My iPhone was recently stolen and since then I've been receiving messages and emails saying that 'a sound was played on your iPhone' or 'your iPhone was found. Visit here to confirm your location'. ...
3
votes
2answers
139 views

activate user account through email

I see a lot of people say to hash for the token on email verification when dealing with member registration. I am wondering, if the email token is only to activate the account and nothing else, ...
1
vote
2answers
102 views

How to prevent phishing mails from being successful? [duplicate]

I'd like to know what the best methods are to prevent success of phising mails. This question contains the following subquestions: What are the best ways to determine incoming phising mails (on a ...
6
votes
1answer
1k views

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
-3
votes
1answer
104 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
5
votes
2answers
119 views

Should I be worried if somebody uses my email to sign up for accounts?

I recently received e-mails from two services: Paytm and Uber. They both seem like legitimate services. However I have no idea why I received these e-mails or why somebody would want to create an ...
2
votes
2answers
284 views

Using email as individual validation

My company often sends orders to brokers and banks to execute certain actions (like buying x stock or y fund). In order to reduce bureaucracy we are considering send a list of emails that are allowed ...
2
votes
1answer
163 views

E-Mail made in Germany. Better than traditional ones like Google or Yahoo? [closed]

A friend of my mine who lives in Germany called my attention to a so called "E-Mail made in Germany" (EMiG). Since the country is well known for exporting high quality products, I decided to take a ...
2
votes
3answers
79 views

Dedicated domain for email registration

With the recent surge in compromised user information on web services, I have the following solution in place for myself: Registered a domain with an obscure domain name. (actually a bunch) One ...
58
votes
6answers
13k views

Is gmail-to-gmail still insecure? Why?

I have always heard that email is an insecure method of communication; I assume this has something to do with the email protocol itself. But when sending an email from one gmail account to another, ...
-2
votes
1answer
104 views

Self-Destructing Emails [duplicate]

So I just recently started reading into Self-Destructing emails trying to learn how they work but I am unable to find much relevant, technical information. I'd like to know exactly how this works ...
2
votes
1answer
254 views

Reasons why there are no web based unified email clients (with OAuth2)?

There are plenty of mobile applications that you sign into with different accounts to retrieve email, contacts, and calendar (such as CloudMagic), and a couple desktop clients (such as Inky). Yet I ...
3
votes
2answers
88 views

Email security on a Windows phone

Let's say I set up a Microsoft account on a Windows phone and use the associated built in email client. If I send an email, would it be send in plaintext. On wifi, if someone is sniffing the traffic, ...