Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,498
questions
0
votes
0answers
61 views
How do they spam my email with my browsing history? [closed]
I really can’t figure how they do it and hope someone can help figure it out. I want to write a blocker extension program to my operating system or browser if they are the source of the problem.
My ...
-6
votes
1answer
109 views
How can Tutanota, ProtonMail and Hushmail all claim to provide privacy when they only allow privacy-incompatible payment options? [closed]
I'm attempting to register an e-mail account without destroying my privacy. The reason is simply that one is necessary to be able to register on a different service (web host for my new, very non-...
3
votes
1answer
76 views
Who should I report spam emails to?
Today I received an email from a person in "critical health condition" who wants to give me about $10 million. It is clearly some kind of scam. What should I do with the email besides not ...
36
votes
6answers
5k views
What is the suggested best practice for changing a user's email address?
I recently jumped onto the hypetrain for an unnamed email service and am currently on my way to update all my accounts on various websites to get most of my (future) data off Google's Gmail.
During ...
7
votes
3answers
178 views
Zero Knowledge Proof of ownership of an email address
Let's say that we want to develop a blogging service where only people with an @example.com email can contribute.
Prior to post submission, the user requests that a large random token be generated by ...
0
votes
1answer
55 views
Why can I still receive email at my old domain after someone else bought it?
My domain expired years ago and was registered by another party.
I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes.
Now if someone buys ...
0
votes
1answer
73 views
Phishing email from a contact
I received an email from what looked like a friend, it had a suspicious link I inspected the email address and saw that the username was spot on but the domain name was totally different. I also put ...
-3
votes
4answers
156 views
Can a hacker access your email address and then choose to do nothing?
I have done a bit of research on what hackers look for in an email address, and it looks like any information is valuable to them, but a friend that knows about the subject has told me that it was ...
0
votes
1answer
61 views
What exactly is a “Combo List”, and why is this site providing them for free?
After asking for e-mail lists the other day, I got linked to this: https://combo-list.com/
This is a very strange "blog" which appears to be regularly publishing (or linking to, rather) ...
0
votes
1answer
45 views
Checking system integrity after clicking scam email link on Linux
Earlier today, my mother opened an email thinking it was from my sister-inlaw, then clicked on the shortened link.
The link loaded a page of fairly nonsensical text. The source of the page had no ...
1
vote
2answers
58 views
Email sender spoofing check from receiver
I understand there are techniques to prevent someone from spoofing your domain in emails.
Is there any guarantee or check that the receiver can do to ensure the sender is authentic?
Gmail shows TLS ...
0
votes
1answer
64 views
how to secure open securedoc.html?
I got call from revenue and asked them confirmation that's it's call actually from them.
They sent me email (I check Gmail original and it's actually from revenu) with securedoc.html
I need to open ...
1
vote
0answers
42 views
How to unencode email urls rewritten by Black Spider [closed]
Since a few months, many organisations have urls in incoming mail rewritten to be redirected through a checking service (Outlook Safelinks, Proofoint, FireEye, Black Spider/Forcepoint). Because this ...
3
votes
1answer
299 views
Why do some email software products block SSL certificates attached to a message?
Whenever I have to share our public SSL certificate with our trading partners through email, I have to change the filename extension of the attached file (i.e. from “.cer” to “.txt”) to ensure it is ...
0
votes
1answer
66 views
Why do I get spam in my newly created email account before even using it?
I made an email account at hotmail.com. Before even using once anywhere I already receive spammail. My question is, how is that possible? And is it unavoidable (from the perspective of an email ...
46
votes
7answers
10k views
HTTPS is widely adopted, why isn't encrypted e-mail as popular?
I don't have an education in computer science, I've just become interested in information security and encryption lately.
I'm struggling to understand why encrypted web browsing using HTTPS has been ...
9
votes
4answers
2k views
How to quickly find out what the threat nature of a password protected archive is without getting infected?
I have recently received an e-mail from an existing support group e-mail box with the following characteristics:
written in the language used in company's HQ (different from English which is the ...
1
vote
1answer
84 views
Why certain sites don't send newsletters to “anonymous” mail addresses?
I use an "anonymous" mail address (cock.li provider in my case). I have found that mainstream news sites in particular don't send their newsletters to such an addresses. It looks like the domains ...
0
votes
0answers
43 views
How to deal with Registered Envelope Service (CRES) if you are not using this service
First of all, I am not using CRES, but many of our clients use it. I want to know the best approach to manage all communications with our clients that use CRES.
I want to avoid using CRES webmail ...
0
votes
1answer
60 views
Email attachments malicious? [duplicate]
So I recently encountered a phishing email, I didn't follow the link of course, but I noticed it had a attachment file of 1KB I didn't download it, but was wondering whether it was possible to be ...
0
votes
0answers
117 views
Has this PC been hacked? What's going on?
I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story.
I'm in the UK. The suspect PC runs Win8.1 up to date, ...
32
votes
6answers
4k views
Is it possible for a name server provider to hijack MX records?
Let’s say:
We buy a domain from http://cheap-unsecure-domains.example.
Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service.
We set some MX ...
0
votes
0answers
26 views
Using Windows XP to only read email [duplicate]
Let's settle the obvious: Windows XP is a very obsolete operating system, running it as the main OS on a computer connected to the internet is not a good idea.
But, if say, you would like to run it ...
2
votes
1answer
78 views
Does there exist any exploit to read someone's old emails, but not recent emails?
The only one I can think of would be if someone exports a backup of their inbox and doesn't encrypt it for some reason. Other than that, is there any case where someone could read your emails from ...
1
vote
1answer
60 views
What is the best way to verify email address or phone number during call centre sale?
My company sells products through calls. During the calls a customers PII is collected and used to create the product. This PII includes email. After the product is created, we email the customer a ...
0
votes
1answer
46 views
sendgrid delivered malware - what's the abuse reporting procedure [closed]
Sendgrid delivered me malware* - where should I report that?
There was no contact info in the headers and the only abuse contact I could find in whois was domain registrar Godaddy.
Last time I dealt ...
0
votes
2answers
113 views
How to prevent ISP impersonating me to send email?
My email server(admin@myEmailDomain.com, ip 1.2.3.4) ---> ISP network ----> Gmail
I built my own email server on my personal computer(ip 1.2.3.4). I also control the domain.
It seems that my ...
0
votes
2answers
141 views
Secure way of sending an email attachment in a user-friendly manner
In the last months I very often was in a position where I needed to send an email attachments with sensitive content to someone whom I didn't know well personally (so that I could talk to them how set ...
3
votes
3answers
318 views
Is a safelinks.protection.outlook.com link phishing?
Received an email which contain the below hyperlink
https://nam02.safelinks.protection.outlook.com/?url=http*3A*2F*2Factuallysale.com*2F&data=02*7C01*7C*7C548d20ace3ec4747fe1008d7d7d8b597*...
1
vote
2answers
46 views
Any campus email systems automatically testing links? [duplicate]
I heard that there are some university campus email systems that "click" all the links on incoming emails and thus inadvertently unsubscribe recipients from email distribution lists if the email ...
1
vote
1answer
72 views
SQL vulnerable if input type = email check is enabled
<input type="email"
class="form-control"
name="email address"
id="signinEmail"
placeholder="Email address"
aria-label="Email address"
value="INPUT"
required=""
data-msg="Please enter a valid email ...
1
vote
3answers
112 views
How to determine if a scanner finding a virus in my email is a false positive?
I have an important email to send. Unfortunately, the recipient's email server rejects it because it found a virus. Note the email has a zipped .exe file attached, the .exe is supposed to download ...
55
votes
7answers
12k views
Is this email asking me to sent them $100 for details on a security flaw in my website a scam?
I've just received this email. Is it a standard practice or a scam?
I'm a Security Researcher running a vulnerability identification
service for a small group of private clients, and I ...
0
votes
4answers
51 views
Potential DoS in emailing admin on error pages
In my website, the backend sends an email to the sysadmin whenever there is an Error 500 with the logs and other data about the error.
How can I prevent a cracker from intentionally triggering the ...
0
votes
1answer
30 views
Risk in adding shared mail server to my SPF like sendinblue/sendgrid for mail reputation?
My enterprise would like to make some mass mailing to their customers, using a third party solution (e.g.: sendinblue, sendgrid, mailchimp...).
Is there a real risk that my domain mail address could ...
-1
votes
2answers
1k views
Received email addressed to someone else from themselves
My outlook account received a suspicious email, addressed to somebody else, AW, sent apparently from themselves to themselves.
The sender is not an outlook address, but I guess outlook might be ...
8
votes
2answers
464 views
When should user invite links (tokens) expire?
We have a system in which external users can be invited to our identity management system.
The users are not employees of our company, but of our customers. The administrators of the
customer do not ...
3
votes
1answer
141 views
Is there a way to bypass click-tracking links in emails?
Most newsletters that I receive use mass-mailing software that rewrites links to add tracking information. That is, instead of www.google.com, the email will point to something like links.somecompany....
7
votes
3answers
280 views
Addressing unsubscribe link leakage when an email is forwarded
Since newsletters are often forwarded (and in fact successful ones encourage it!), what's the conventional wisdom on the security of unsubscribe links?
It's common practice provide an unsubscribe ...
0
votes
0answers
26 views
Postfix maildrop -> pickup “from:” verification [duplicate]
I was surprised to notice that sending E-mail from local server account allow any user to send message with:
From: whatever@whateverdomain
This is a security issue, because it allow identity ...
2
votes
1answer
106 views
How to safely display html emails?
I'm building a webmail application using php at the moment. I'm getting the email content from gmail using Imap and wanted to display the email as close as I can to how gmail shows it. Is it safe to ...
0
votes
0answers
30 views
Saved email attachment not reflecting the actual sender of the email but the email of the person who received the email attachment as sender
I have come across certain scenarios which confuses me on how it is possible to manipulate email headers.
The person who received an email(A) from person (B), forwarded me (C) the email as Original ...
2
votes
3answers
124 views
What exactly determines which entities/servers “on the Internet” get to read my e-mails when I send them from X to Y?
Let's say, for example, that I have a Gmail account. I compose and send an e-mail to info@somecompany.com. They aren't using Google services, just so that we can exclude "special cases" where they ...
55
votes
8answers
17k views
If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?
I've been trying to figure out "practical encryption" (AKA "PGP") for many years. As far as I can tell, this is not fundamentally flawed:
I know Joe's e-mail address: cool_joe@gmail.com.
I have a ...
0
votes
2answers
352 views
Someone is using my email to create online accounts; what should I do? [duplicate]
I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
0
votes
0answers
25 views
I've been an emailed a password; how can I proceed as securely as possible? [duplicate]
I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
0
votes
2answers
128 views
High bounce rate due to attacker is using website's mail system
We got a realatively high bounce rate today, because someone decided to spread some links using our mail server. The implementation looked like this:
He used the registration form and planted a link ...
0
votes
1answer
89 views
Force specific encryption cipher for S/MIME mails
I have a number of contacts who can only decrypt 3DES, when it comes to S/MIME encrypted mails. I'm aware that this is by far not ideal, but better than no encryption at all.
My problem is, that I ...
0
votes
2answers
120 views
Phishing emails - What do I look for?
I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one?
There are some things I know to look for already but I want to get moer ...
0
votes
1answer
63 views
DMARC & failing SPF
I would like to clarify the following scenario with DMARC, (assuming there is a publish DMARC policy):
SPF fails
No (aligned or any) DKIM records
Should result of DMARC check be none or fail? ...
