Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

3
votes
1answer
84 views
+50

Possible for Lync (Skype for Business) to adopt Activesync-style policies?

My compliance manager recently told me that Lync IMs should be treated as e-mail for compliance purposes. This also made me realize that our other email policies (encrypted device, pin required, ...
8
votes
2answers
1k views

Do any Exchange hardening guidelines recommend disabling OWA Webready? Should they?

For the fourth time in over a year, Exchange OWA has put our internal network at risk due to a remote code execution flaw that exists on the server runtime. This risk is compounded by the fact ...
3
votes
0answers
79 views
+50

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
1
vote
2answers
62 views

How to prevent phishing mails from being successful? [duplicate]

I'd like to know what the best methods are to prevent success of phising mails. This question contains the following subquestions: What are the best ways to determine incoming phising mails (on a ...
0
votes
0answers
30 views

Clicked on an email from past acquaintance [on hold]

I received an email from a person I met on a trip. The email asks me to click on a link to get an important file. I clicked because I knew the email address was from the person I knew. When I ...
1
vote
2answers
44 views

Dedicated domain for email registration

With the recent surge in compromised user information on web services, I have the following solution in place for myself: Registered a domain with an obscure domain name. (actually a bunch) One ...
5
votes
2answers
447 views

Yahoo mail hacked - how to recover, how did it happen and how to prevent?

I was yesterday informed by some friends that they received spam mails with my name as sender. The sender addresses look like firstnamelastname@spacepc.pt and firstnamelastname@revistaplot.com with ...
-3
votes
1answer
65 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
1
vote
1answer
95 views

E-Mail made in Germany. Better than traditional ones like Google or Yahoo? [closed]

A friend of my mine who lives in Germany called my attention to a so called "E-Mail made in Germany" (EMiG). Since the country is well known for exporting high quality products, I decided to take a ...
6
votes
2answers
100 views

Should I be worried if somebody uses my email to sign up for accounts?

I recently received e-mails from two services: Paytm and Uber. They both seem like legitimate services. However I have no idea why I received these e-mails or why somebody would want to create an ...
1
vote
2answers
255 views

Using email as individual validation

My company often sends orders to brokers and banks to execute certain actions (like buying x stock or y fund). In order to reduce bureaucracy we are considering send a list of emails that are allowed ...
55
votes
6answers
11k views

Is gmail-to-gmail still insecure? Why?

I have always heard that email is an insecure method of communication; I assume this has something to do with the email protocol itself. But when sending an email from one gmail account to another, ...
7
votes
3answers
836 views

Can my ISP read my gmail even when using HTTPS? Is there a way to prevent that?

Can my ISP read my gmail or other email even when using HTTPS? I guess they can do that since they are the "man-in-the-middle". Is there a way to prevent that? This is related to the news that in ...
1
vote
0answers
11 views

Do spam filters work if I use a forwarding address? [migrated]

I made the mistake of replying to a linkedin connection request with my main forwarding email and have started getting spam after years of 0 spam (have blocked linkedin requests now). I have been ...
-3
votes
1answer
96 views

Self-Destructing Emails [duplicate]

So I just recently started reading into Self-Destructing emails trying to learn how they work but I am unable to find much relevant, technical information. I'd like to know exactly how this works ...
1
vote
1answer
69 views

Reasons why there are no web based unified email clients (with OAuth2)?

There are plenty of mobile applications that you sign into with different accounts to retrieve email, contacts, and calendar (such as CloudMagic), and a couple desktop clients (such as Inky). Yet I ...
-2
votes
0answers
22 views

Use OSSEC to monitor emails leaving at too fast a rate

I'm new to using OSSEC. I'm looking to monitor postfix running on a couple Ubuntu servers. We have had our servers send out ridiculous amounts of spam after an infection, and I'm trying to get OSSEC ...
2
votes
1answer
41 views

Email security on a Windows phone

Let's say I set up a Microsoft account on a Windows phone and use the associated built in email client. If I send an email, would it be send in plaintext. On wifi, if someone is sniffing the traffic, ...
0
votes
0answers
36 views

USA PATRIOT Act and Office 365

I have a local Exchange server, which has several spam and email reception issues (Due to an expired subscription to a spam filtering system). I was looking at the Office 365 Exchange Online ...
2
votes
2answers
66 views

Is it appropriate to block a sender's email address

This morning I received a mail from Apple suspension UK <do_not_reply@apple.co.uk> with the subject Apple "Unauthorised transaction alert". The mail was sent to one of my company's distribution ...
3
votes
1answer
58 views

Is it a bad idea to forward a suspicious email with an attachment - even to a secure address for analysis?

The more servers the message passes through the more potential of the attack to execute successfully? (0-day etc). Or is this paranoia? Instead: Delete, disconnect from network, and phone security ...
3
votes
3answers
147 views

Would trolling the people behind scams help decrease scamming? [closed]

It is easy for smart people to identify scams. This isn't an accident, phishers want stupid people. Sending the emails is the easy part, getting their money is what takes effort. My question is, ...
2
votes
1answer
123 views

Reading encrypted data before sent to remote server

I'm developing a mobile app (Android only for now) to provide a disposable e-mail service to users. Users will be given temporary e-mail addresses so they can receive and read e-mails for a certain ...
-3
votes
0answers
15 views

Do 'Unsubscribe' Links Work in Spam E-Mails? [duplicate]

Recently for the great fun, I was reading through my spam folder. I found that on 99% of messages there was a very small link on the bottom that said (roughly) We value your privacy. To unsubscribe ...
14
votes
3answers
774 views

Why is encryption (or signing) of long lines in E-Mails with PGP problematic?

I am using Thunderbird with Enigmail and OpenPGP to encrypt and/or sign E-Mails. On many occasions Enigmail complains that I have too long lines in the mail and asks how it should wrap them. However ...
4
votes
1answer
41 views

Passive fingerprinting of email client, based on email headers

Are there ways to passively fingerprint (infer) the operating system or mail client that an email sender is using, based upon the headers of an email from that sender? I'm familiar with passive ...
-1
votes
0answers
21 views

Site to report password security policy issues [duplicate]

I just got an email from a site after I created an account and they emailed me back my password. I was shocked as its a pretty big eCommerce vendor and they broke such a common sense security rule. ...
21
votes
6answers
13k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
62
votes
2answers
9k views

What is the purpose of these weird non-spam emails?

A mail made it through the spam filter and i wonder what the purpose is. It is not spam. Tracking? But how? Who? and why? In the source code there are this weird passages like ... =EA=85=9F ...
7
votes
2answers
488 views

ProtonMail security concerns

This TED talk brought me here. First of all, to those who created ProtonMail: Nice job!!. Regardless of what people say, it's definitely a big step forward from tradition options like Hotmail, Gmail ...
0
votes
0answers
7 views

SPF - Will softfail get inherited when included? [migrated]

If I add the SPF-policy v=spf1 include:_spf.google.com -all to my domain, will the -all have some effect or will the ~all from _spf.google.com get "inherited" to my domain?
1
vote
2answers
84 views

LAMP MailServer without SSL… so what's the problem?

I want to set up a MailServer on Ubuntu for my website, and access the email from my POP3 client without enabling SSL encryption (I suppose the SSL is used to encrypt the password?). My questions ...
3
votes
5answers
8k views

How commonly are SSL/TLS or S/MIME used by e-mail providers?

I was reading through different posts here about email security. After reading these I still have some questions. I understand that S/MIME can be used to transfer email securely between servers. ...
68
votes
8answers
7k views

Unsubscribe safely

I have heard that is better to never click to any link in an email. Is it a bad idea to click to a unsubscribe link? What is the best way to unsubscribe to undesired mails?
25
votes
3answers
4k views

How can people send me spam emails from the future?

Is this an exploit of the email system of some sort? I receive a great deal of spam every day, and my accounts in Yahoo and Gmail sometimes show me spam emails from the future. Yes, the future. ...
4
votes
4answers
229 views

Safe way to communicate IBAN connection

How do I securely communicate my bank connection details (IBAN + full name) to an otherwise trusted person with email being the only connection? Obviously I wouldn't use (plaintext) e-mail since any ...
10
votes
2answers
10k views

Is it possible to use S/MIME in the web client of Gmail?

I could not find any options in the web interface of Gmail. All I could find was a Firefox plugin to use S/MIME with Gmail, but it seems to be outdated.
1
vote
0answers
30 views

How should end users respond to Earthlink's “Allowed Sender” feature when blocked by policy?

Some of our users are requested to click on an Earthlink antispam URL below https://webmail.pas.earthlink.net/wam/addme?a=USERNAME@earthlink.net&id=<SOME GUID> However our firewall ...
4
votes
3answers
389 views

Using + for email addresses to find out who is selling your data: is it naive or is it effective?

It's pretty common among security-minded folks to fill in addresses using e.g. foo+company@gmail.com when disclosing their email address to company so that they can tell if company has sold their ...
-2
votes
2answers
51 views

Is there any way to formally ensure privacy to my clients by technical means?

Imagine you are a software solutions company. One of the solutions you provide are domains, email and forwarding mail to their Gmail accounts. After we have created a domain and several email ...
2
votes
1answer
31 views

Multiple OpenPGP encryption keys signed by a single certificatation key?

Say I have several different email accounts and I want to use a different encryption key for each of them but still have them all certified under one identity. Is this a good idea and how would I do ...
1
vote
1answer
51 views

Resellers and web admins and email privacy

Maybe I'm missing something, but this is "my problem". If you ask some company to create some domain for you and several e-mail account with that domain and forward that information to your gmail ...
5
votes
1answer
229 views

Security of Yahoo's new authentication: On-demand password

Yahoo is trying to remove passwords from authentication and use on-demand password authentication system instead. I wonder how this new system will be secure? Even if somebody steal your mobile can ...
0
votes
1answer
130 views

How dangerous is checking email on open Wi-Fi network

How risky is it to check my email on my smartphone on an open Wi-Fi network (i.e. Starbucks or Old Navy)? Is this only risky if someone is snooping? Do they have to be there, or can they leave a ...
3
votes
1answer
42 views

Question about email app in Python and security

I've managed to get my tiny little app to send an email with a click of a button using this code (this is just the email part): http://pastebin.com/nR5g28ct But to avoid some error, I had to allow ...
2
votes
1answer
46 views

Are there any examples of when personal email data can be brought into a lawsuit involving a corporation?

If users bring their own device (BYOD) and they have corporate Exchange (or Goodlink email) on that device, could the other email accounts on that device be open to a legal search? Would the SMS ...
0
votes
0answers
87 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an ...
2
votes
3answers
112 views

Tracing an email's MAC address

Can someone trace the MAC address of an email to the point of origin if the email address has been deleted? I received an email from an unknown sender regarding an issue at my work, and when I tried ...
-6
votes
1answer
119 views

Is Google intercepting my emails? [closed]

I was recently checking my Recent Activity under the "Details" tab inside my Gmail inbox, and I noticed this IP Address, it's not my IP: I proceeded to look up the IP and it's located in Mountain ...
4
votes
2answers
469 views

Passwordless login over email - security considerations

I'm proposing the use of a login system that sends a one-time login token (with high entropy) via email to the user. After using the token, the user receives another token via email and the previous ...