Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

1
vote
0answers
8 views

Mail from Outlook to GMX: via Yahoo?

On inspecting source of a clear scam mail I received, I noticed that the mail send from Outlook to GMX has somehow passed through Yahoo servers - how come? Is it some way to hide their original ...
0
votes
1answer
52 views

How can I test my spamfilter under real world conditions?

We are currently planning to migrate our outsourced mail solution to our own servers. The last thing we need to test is the spam filter. We are going to use a cloud based spam and anti virus filter ...
27
votes
4answers
17k views

What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?

I would like to ask what happens when an email is sent from gmail, yahoo or hotmail public web email services? I don't understand email protocols in details, but as far as I know email traffic is ...
7
votes
4answers
390 views

How can I convince my communication partner to use encryption in everyday life?

The latest developments made it very clear, how easily basically all communication channels can be wiretapped. However, I think most people still ignore this fact. Especially in business most ...
3
votes
6answers
3k views

How can a non-technical user verify a message was sent “securely”? …or over TLS?

I have a situation where B2B and B2C communication needs to be sent securely and not visible to most SMTP hijackers. I don't care about conspiracy theories or NSA style attacks, but want to provide ...
1
vote
3answers
146 views

What is the simplest way to send an anonymous email?

I would like to send an email that can't be traced back to me, is there a simple direct approach to do that? I mean an electronic way that doesn't involve me going to an Internet cafe wearing a ...
8
votes
3answers
76 views

How can you prevent email addresses from being harvested from a registration form?

When you go to a website's login form and enter the wrong credentials, the website can give you one of three error messages: Your email is wrong Your password is wrong Your email or password is ...
0
votes
1answer
71 views

Sites sending email using my email address

Today I was looking through my spam folder and noticed an email: The sender was myself, assume my email is xxx@gmail.com, on the from section it says xxx@gmail.com via clicktheprofits.com Does ...
1
vote
2answers
52 views

Is it possible to digitally sign an email twice?

User A encrypts an email with the public key of user B and digitally signs it. User B receives this message and decrypts it. B wants to forward it to user C, encrypts it with C's public key and signs ...
5
votes
1answer
364 views

PGP-encrypted Email or SSL/TLS Webform for Responsible Disclosure Communication?

So it's a fairly simple question. When offering an avenue to security researchers for communication with us regarding disclosure of security vulnerabilities, what's the best way to do so? Assume we ...
1
vote
1answer
52 views

How to secure/cleanup my accounts after having an old email account breached

I have two email accounts. My main one that I created a few years ago and switched to, which has a very strong/unique password that is not written down or stored anywhere. It also has 2-factor auth ...
1
vote
1answer
72 views

Is the following e-mail fraud technically possible?

Summary: Can email be intercepted and modified by a 3rd-party during transit from the sender to the receiver? If so, can this interception be detected? Details: My friend (A) (mailbox at popular ...
54
votes
11answers
11k views

Why would a spammer try to get a (normal) image of mine?

Yesterday I found a spam mail in my inbox. I inspected it in order to find out why DSpam and SpamAssasin failed. You can find the raw German mail here, here's a translation: Good Morning. We got ...
14
votes
3answers
2k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
-2
votes
0answers
18 views

detect forged e-mail system for windows? [closed]

some instances people send emails with false or "forged" headers. How can detect forged e-mail? (some program in windows)
3
votes
3answers
292 views

How do web email clients store my passwords from other providers?

The situation comes down to this: When I enter in hotmail, it retrieves my messages connecting to other providers: they could only do so by using my email and password. Since I had signed in a ...
5
votes
3answers
29k views

Someone keeps using my email address. What to do?

I have had a GMail ever since it was created, so it's an email address that is easy to remember, but also easy for somebody else to get confused with. Since I'm not going to post my email address ...
5
votes
1answer
126 views

I emailed someone a picture of a check I wrote for them. What now?

On a whim, I emailed the intended recipient of a check I wrote a picture of that filled-in check to indicate I was about to mail it out. The full front of the check, with amount, my signature, account ...
51
votes
6answers
9k views

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
0
votes
1answer
42 views

Where can emails be sniffed from? [duplicate]

I understand that you should not send private information in emails due, in part, to the fact that this traffic is usually unencrypted and can therefore be sniffed while in transit. Where would a ...
1
vote
1answer
49 views

Is it possible to prove that a forwarded email has been tampered with prior to being forwarded?

I have requested that an old email exchange between myself and HR be forwarded to me by a previous employer. They complied with the request but I suspect that the body of the exchange which they ...
2
votes
0answers
46 views

How Vulnerable Is An Older Version Of Outlook As An Email Application?

I am significantly displeased with some of the newer versions of Microsoft Outlook. I would prefer to continue using my older version from Office 2000 (on Windows 7 using workarounds). As a networked ...
2
votes
2answers
84 views

TLS capable SMTP store-and-forward server — does it have to store private keys?

I know that email is inherently insecure anyway, but considering that pretty much everyone that I send email to is using a large, somewhat-trusted cloud provider, (hint, starts with G) I would expect ...
9
votes
4answers
2k views

Hashcash, is this really used?

I just heard about this term, is it really used? The concept does not seem new, is it used and/or implemented in current technologies?
6
votes
1answer
196 views

Bank Has Emailed My Social Security Number

I'm in the middle of getting a mortgage. Just now, my bank sent over an e-mail (sent to my Gmail account) with a bunch of .pdf attachments of documents I'm supposed to sign and return. The first ...
13
votes
6answers
3k views

Is it a security issue to allow nearly identical email addresses when registering?

Say you have a website where it is possible to create accounts for all of the following email addresses: 'test@test.com' 'test@test.com ' 'test@test.com;' 'test@test.com;test2@test.com' Should this ...
16
votes
7answers
10k views

Forgotten password or reset link, which is more secure to email?

I originally posted this as a reply here in this thread but didn't get much feedback on it, and now I'm curious as to what others think is the best approach, or if there is any difference between the ...
4
votes
1answer
143 views

Possible for Lync (Skype for Business) to adopt Activesync-style policies?

My compliance manager recently told me that Lync IMs should be treated as e-mail for compliance purposes. This also made me realize that our other email policies (encrypted device, pin required, ...
3
votes
2answers
83 views

How to view e-mails without internet connections?

If I want to make a secure PC that has zero network connection, how can I view my e-mails on it? Are there any tricky solutions to still view my e-mails while I have no network connection? And all ...
1
vote
3answers
90 views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...
0
votes
5answers
251 views

My email hacked

Someone has definitely gained access to two of my alternate emails. I know this by looking at the login activity. By looking at the email logs I discovered that the IP that is always gaining entry to ...
0
votes
1answer
130 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
3
votes
1answer
72 views

I am getting mail from cron daily and can't identify the source

I am getting a mail from crontab and can't identify the source of it. My site is brand-new so I am not sure what this is doing or its purpose. Is it some hack? <html> <head> <META ...
0
votes
1answer
53 views

Mail server security: Mails to internal receivers with faked sender address

I noticed that I am able to send emails from my company's mail server to internal receivers from faked inhouse sender addresses without problem and I'm wondering if this should be supposed a security ...
3
votes
4answers
165 views

Can my computer get infected if I hover the mouse to check the thumbnail of an e-mail attachment?

So, today an user sent me an e-mail about a suspicious e-mail. When I opened it to check it, I accidentaly hovered the mouse over the "doc.jpg" and it opened the image thumbnail. I never bothered to ...
12
votes
2answers
8k views

Is email encryption, as claimed by ProtonMail, possible?

Is it possible to create a Web service that encrypts all messages, such that only the writer, and the person to whom the mail is sent, can read it? In other words, is the theory behind ProtonMail ...
17
votes
10answers
6k views

Encrypting email for gmail

My friend who is an accountant was asking me what the best way to exchange documents with clients. He was trying to tell me that just sending via email was sufficient and I told him he was insane. I ...
0
votes
1answer
38 views

How do country's block politically charged spam? [closed]

I have a friend who is returning to China shortly, and I wanted to stay in touch with him so I got his email address. I was wondering what precautions does China (or any other dictatorial regimes for ...
3
votes
3answers
277 views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
1
vote
0answers
31 views

What informations leaks during send mail programatically from google account [closed]

Imagine if you are sending an email by the gmail.com using web online interface so entering the website of google, then compose mail and send it. In this case your ip address is not revealed to the ...
6
votes
3answers
1k views

How to prove someone sent an email to you?

There are similar question about how to prove YOU sent an email, but I want to know if it is possible to prove a 3rd party sent an email to me. An individual sent some very threatening emails to my ...
3
votes
3answers
9k views

Yahoo Account hacked, changed pw, spam still going out elsewhere?

Spam emails went out for an hour earlier this week bearing my Yahoo account in the FROM field and going out to all my contacts. I changed the password, then saw (via rejected emails sent to my Yahoo ...
0
votes
0answers
18 views

Raspberry IP email on boot bypass [migrated]

I have configured my Raspberry Pi2 B+ to send an email through SMTPS (smtp.gmail.com:587) after the boot with the IP address of eth0 and wlan0. So Usually the eth0 will obtain an IP address by the ...
6
votes
1answer
65 views

iOS Mail App Security

I have my own domain name and I had some issues with the delivery time. So, I started looking at the mail header to see where my mail was stuck and why. That is not the issue.. While messing around ...
24
votes
7answers
39k views

Is it still unsafe to email credit card number nowadays?

We all know not to do it, but someone emailed my credit card number and cvv code to my gmail. I'm wondering if the risk is so low I don't have to call to cancel my card. The email is sent from a ...
0
votes
1answer
34 views

Email address used by someone else to order on line [closed]

Someone, or however it's being done, is ordering things from all over the internet, using my son's old email address. He no longer uses that address, however, they are placing orders to our address. ...
1
vote
2answers
60 views

Malicious email attachments analysis

I have a question regarding incoming emails with malicious attachments on my email server. So, my idea, in my ideal setup, is to have a machine aside running virtualization software. This would run ...
5
votes
4answers
3k views

CAPTCHA or email confirmation?

I have read that captcha isn't a perfect solution to protect a website where for example the user can create an account, since there are many people in different countries that practicallty read ...
1
vote
2answers
64 views

Use DANE to authentify mail sender

I have my own virtual DNS infrastructure, from the root to the mail server mail.example.com. Everything is signed using DNSSEC. client1@example.com can send email to client2@example.com, digitally ...
9
votes
2answers
77 views

Best practices when forwarding an email or copy / pasting from confidential information sources?

I get asked this a lot from older people, or for legal matters. They want to forward an email message they've received to another party, while removing any identifying information from the first party ...