Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
-1
votes
0answers
21 views
is the “unknown” in the path of this email, the source of the delay and does it occur prior to leaving Docusign?
Created at: 6/6/2016, 1:05:58 PM PDT ( Delivered after -13 sec )
SPF: pass
DKIM: pass
DMARC: pass
# Delay From * To * Protocol Time received
0 ...
0
votes
0answers
5 views
Can you tell who approved an email to go out from a distro in Exchange online?
We have some distros that require moderator's approval if the sender is not on the allowed sender's list. So the email land's in all the moderator's inboxes and one of them clicks a button to allow ...
1
vote
0answers
43 views
Breach of HTTPS shared server URLs sent through secure email
I host some simple services for my own use on a commercial shared hosting server. These URLs are cryptic and not easily guessed, and the query strings tend to be long and cryptic. The web services are ...
1
vote
6answers
878 views
I am receiving weird emails regarding GDPR from electronicprivacy.eu
Since a week, I am getting some French emails. Since I don't know French I used google translate to know what is this about:
Email 1:
Bonjour,
En application de mon droits d’accès et d’...
2
votes
1answer
31 views
What are Outlook's safe links? [closed]
People using outlook.com as their mailbox may know this: If you receive an e-mail with a web link in it and copy the link with "right-click + copy link location" you will receive an outlook protection ...
2
votes
1answer
40 views
Should user be authorized in site after following email change confirmation URL?
When users triggers email change, we send a link to their new email address.
If user follows the link, should we only proceed with email change after authorization (being logged in the site), or we ...
0
votes
2answers
154 views
what is @rupayamail? It stole my skype account! [closed]
What is rupayamail email service? The email address that managed to infiltrate itself on my skype account and change the password and consequently remove my original email was stephane101@rupayamail....
0
votes
0answers
26 views
SMTP connection attempt failed user authentication check [closed]
Mailing_list@domain.com is mailing list including officers’ mail addresses from various companies.
Amongst them, employees from "company 1" (employee1@domain1.com, employee2@domain1.com and employee3@...
60
votes
6answers
9k views
What should a verification email consist of?
Right now I'm generating a 25 character string stored in the database that can only have a 1 time use and expires 30 minutes after user registration.
http://example.com/security/activate/...
1
vote
2answers
49 views
Are there security pitfalls on relying on an emails domain to automatically assign permissions?
I'm working in a new clients system, and they automatically assign permissions based on the domain name for the email address the account was created under (they do require validation via an email).
...
1
vote
1answer
45 views
Does PGP encrypt all messages or only that one send with PGP?
If I encrypt my Email with PGP will all of my emails will be encrypted or only that ones that people send to me using my PGP key?
If I register on Facebook or Dropbox and they send me an email: "...
2
votes
0answers
36 views
Search function in Outlook and attachements
I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files ...
0
votes
0answers
19 views
E-mail verification - Possible to perform during an attempted PW reset?
I would like to enforce verification of an E-mail address during registration and would limit user functionality until they have verified their E-mail. I've got a general idea of the leading practices ...
0
votes
0answers
20 views
How can I much can I consider an email secure? [duplicate]
People always forgot passwords, so some people prefer to simply send a token over email https://hacks.mozilla.org/2014/10/passwordless-authentication-secure-simple-and-fast-to-deploy/ (which is the ...
0
votes
0answers
37 views
Is this a realistic sounding threat? (quite urgent) [duplicate]
Not sure if this is an acceptable place to post this but fairly desparate to be certain so apologies. I'm fairly careful and don't think I would have entered details on anything insecure but the email ...
1
vote
1answer
55 views
How to avoid man in the middle attacks when sending sensible info via email?
I'm setting up a website where users can buy cupons. I should send coupons codes to customers via email and these codes are enough to use the coupon. How can I avoid man in the middle attacks? Do you ...
2
votes
2answers
134 views
How to harvest plaintext passwords from emails
Do you have any links to stories from a reputable source about any malware that harvests plaintext passwords from emails?
I do tech support and every once in a while one of my clients will send me ...
0
votes
0answers
29 views
How to get computer name and IP address of sender of email sent with Gmail? [duplicate]
Is it possible to see IP address and computer name when someone send an email (using Gmail) to my Gmail or any other email client?
When I try to send mail to some others (some mail clients) they can ...
-2
votes
3answers
87 views
Two different IPV4 inside outlook email header
I am currently analysing an outlook email header.
I am very confused because it has two ipv4 addresses x-originating from different locations. Usually there is an ipv4 towards the top of the header ...
16
votes
2answers
3k views
Why is some meta data not encrypted in Proton Mail?
In a different Question, in the first answer is written that some meta data doesn't get encrypted.
What you shouldn't forget about encrypted e-mail, is that while the message body is properly ...
0
votes
2answers
114 views
Check reputation of specific email address [closed]
I know that it's possible to check the reputation of email address domains, but what does the security community use to find information on the reputation of specific email addresseses?
List of ways ...
1
vote
3answers
333 views
Is this a phishing email?
I've just received the strangest email:
I don't understand why anyone would send an email like this. It doesn't look to be asking for credentials of any kind. Is this a scam which is designed for ...
0
votes
6answers
250 views
Secure way of sending a excel document to a third party?
Looking to send an excel log file to a third party securely, any sensitive data will be obfuscated.
Initially was looking to use PGP but the third party does not have this and time is a constraint.
...
2
votes
1answer
192 views
Is Mailbait still a threat?
Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated?
Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
6
votes
4answers
329 views
How to leak an email without revealing my identity?
I'm a faculty member at a university and I want to leak to students an email sent between the administration and faculty members concerning ethical transgressions against the student body as a whole.
...
0
votes
1answer
49 views
Spoofed email has appropriate alias but unknown email
My wife received a suspicious email where the "FROM" field contained my name, but the email appeared to be delivered from an E-Mail address that we do not recognize.
The fact that the email used my ...
2
votes
2answers
392 views
What to do about email threats containing leaked passwords?
A few days ago I got an email from a hacker supposedly using an email of mine (he was using the same email address TO and FROM) from my own email domain, and had a part of a password I use to purchase ...
31
votes
1answer
8k views
Is it possible to fake 'received' field in the e-mail?
I've received some strange e-mail recently. The e-mail has different From and Reply-To fields. It has also To set to Undisclosed recipients but it's not crucial.
At first I thought it's fake, but ...
0
votes
0answers
39 views
forensic work on phishing attack sent by user email client
I had an incident where a phishing email was sent to all addresses in the email client (Outlook) auto-complete list to this landing page (VT Report page). It even replied to the emails of the ...
1
vote
2answers
121 views
Can a custom return path make SPF redundant
My understanding is that SPF can be used to define a set of IP addresses that are permitted to send outbound emails on behalf of a domain. If a mail server that is not included in the set of permitted ...
0
votes
0answers
32 views
How to find accounts in leaked databases based on the domain name in the email address?
I like to find accounts in leaked databases based on the domain name associated with the leaked mail addresses. Public databases such as https://haveibeenpwned.com/ have this ability partly. Searching ...
1
vote
1answer
60 views
Does it make sense to keep encrypted versions of emails addresses?
My boss came up with a strange idea in my opinion. He doesn't want to keep email addresses in the database. However, we use them to log people in, and we keep newsletters to those who actively gave ...
2
votes
0answers
55 views
What security precautions should we take when letting a C# application send/receive emails?
I'm writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve S/MIME encrypted (and maybe also signed) emails ...
3
votes
1answer
200 views
Is this “forgotten-password” procedure safe/legal?
Recently, I had lost my password on a web app that is supposed to be really secure (think bank or government type web app). This web app contains a lot of personnal critical infos (like SSN and salary,...
2
votes
1answer
141 views
Do real-name email adresses hurt the anonymity provided by torbirdy?
Scenario:
Someone uses thunderbird to manage her various email addresses. All of those contain her real name (work, university, ...). One day, she has need of an anonymous email account and so creates ...
1
vote
4answers
173 views
why do I get an email with address of Me'.exe'
I am wondering if there is a security issue with this. I use Mozilla, and I got an email with Me, '.exe' <myemail@server.com>. I have never seen this. What is it? Is it a way to send mass email? ...
3
votes
2answers
49 views
When is an email rejected?
Currently, I am working on a web application and wanted to let users send emails to others through a web form. So, they just should submit their email address and my web app would then send mails to ...
0
votes
1answer
89 views
Reuse an email address with a leaked password
I just found that the password of a very old email address was leaked. I did not use this email address for a long time cause I lost its password. But now that the password is out, I'm thinking of ...
0
votes
3answers
43 views
Sending email from my provider back to my provider with data from user input secure?
My boss wants me to create the following functionality:
A user fills out a form on our website with some data. He can also upload some files, which have personal information.
After the form is ...
0
votes
0answers
18 views
Was RocketMail part of Yahoo's data breach?
Since Yahoo's massive 2013 data breach we have refused to accept Yahoo/Ymail email addresses as personal recovery accounts for GSuite.
I'd like to know if:
RocketMail accounts were included in that ...
0
votes
0answers
10 views
Mail gateway on top of Tobit.David mail server
I am looking for an email gateway for automatic en-/decrytion based on the mail content.
I thought about trying a hardware gateway.
Can I just put the gateway in between the mail server and the ...
1
vote
0answers
68 views
Email login bug, is it a security concern for email users?
(The name is vague on purpose because I'm not entirely sure how bad of an issue this is or if it is well known yet and I don't want to accidentally leak some kind of major breach type thing)
Scenario:...
0
votes
0answers
14 views
Selection Criteria for PGP Generator
My original question's responses indicated that I need to have my small team generate their own public \ private keys for securing email.
So the question now shifts to selection criteria for a PGP ...
0
votes
0answers
26 views
Can an email man-in-the-middle attack from your own host be prevented? [duplicate]
This week some of the emails from my server started being dropped with the message "550 Action not taken (in reply to end of DATA command)". It seems to be caused by spam software on my dedicated ...
1
vote
1answer
168 views
I would like to get scammed [closed]
I would like to get scammed via email to have some fun. How can I achieve this? (I have looked online and have found no answers only how to not get scammed.)
-1
votes
1answer
178 views
People using my email address (and only that) for booking hotels. What kind of scam is this?
I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...
0
votes
4answers
106 views
Travel information and passport
I travel a lot and I am looking a good way to send my travel information, like hostel, passports etc. to send to my family before leaving.
This information is confidential. Actually, I am using a Zip ...
6
votes
2answers
157 views
What are the circumstances in which it's not foolhardy to have access to your primary email address through your smartphone?
Most web sites I use allow a password reset through email; a few require two-factor authentication with a phone call or SMS. It would perhaps only be banking or major commerce sites that would require ...
2
votes
1answer
84 views
Is this phishing? How can I be sure? And what can be gained?
Yesterday I received an email that I assumed/hoped was legitimately from a prospective employer that I interviewed with several weeks ago. The timing of the email couldn't have made more sense as they ...
0
votes
1answer
58 views
Login key in email
I use a service for improving my English which includes authentication for users, it has a feature for sending emails for some types of new exercises. I was surprised when I saw the URL for emails:
...
