Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,701
questions
0
votes
0
answers
21
views
How does pretty good privacy works for authentication and confidentiality?
I needed to study about these 2 topics. So I picked up a keyword "pretty good privacy" "authentication" "confidentiality" and searched for books in
libgen
google books
I ...
- 1
30
votes
4
answers
7k
views
Can I prove that I did not receive an email?
A company are saying they sent an email to me. I have gone through all of my inbox, junk, and deleted files and the email still doesn’t exist. They have asked me to prove the email never got to me by ...
- 301
0
votes
2
answers
69
views
Does my receiver have a public key for email encryption?
I'm using an email service with encryption option and I need to send an encrypted email. So if I need my letter to be sent encrypted, I need to take my receiver's public encryption key and apply it to ...
- 11
0
votes
2
answers
51
views
How can I receive a (spam) email from an unknown email address?
When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
- 123
0
votes
1
answer
46
views
Email TLS coverage for forwarded recipient email address
When an email recipient server (say server-A) is configured to forward to another email addresses (on say server-B), is TLS applied all the way up to server-B, or does it end at server-A, or something ...
- 103
0
votes
0
answers
25
views
Do I have to check the fingerprint of new received OpenPGP public key, if it has been sent in a signed and encrypted email from a verified source?
I asked this question before at https://askubuntu.com/questions/1404973/do-i-have-to-check-the-fingerprint-of-new-received-openpgp-public-key-if-it-has and the answer to my question was "This ...
- 101
0
votes
0
answers
30
views
Spam investigation and email reputation check
We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
- 3
0
votes
2
answers
85
views
Is the text of an email subject line a softer target for surveillance than the text in the body?
After using PGP for a long time I have trained myself to write bland email subject lines that disclose little or nothing about the contents.
Some people I correspond with unencrypted have an annoying ...
- 357
0
votes
1
answer
117
views
Is it safe to use AnonAddy or SimpleLogin for email address security?
I was intrigued with AnonAddy and SimpleLogin. They provide an email address forwarding service to prevent leakage of your real email address.
I just want to ask if they really hide my real email ...
- 25
0
votes
2
answers
56
views
How to check the authenticity of an outlook email attachment (.msg)?
let's say that someone sends me a business email on Microsoft outlook 365.
I save the email as an attachment (email.msg)
How a third person can make sure that the email attachment is not edited (...
- 109
3
votes
2
answers
471
views
Cipher suite choice on macOS on Apple Silicon
I have a postfix mail server that accepts these cipher suites:
tls_high_cipherlist=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:
ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:
...
- 627
0
votes
0
answers
8
views
Click on a link in a malicious email - how can i be hacked? [duplicate]
I accidentally clicked a link in a malicious email. The link has opened in my browser. I have not entered any username and password to login in.
Could I have been hacked? I'd like to know what could ...
2
votes
3
answers
572
views
Securing Email: use GPG for all emails?
I am thinking of using GPG to sign commits and particularly to secure emails, and have some questions regarding the usefulness.
Basic threat model
(I use LESP as abbreviation for large email service ...
- 29
-1
votes
1
answer
75
views
What might happen if you post a local URL?
To show something in a forum you capture a page of an email service after logging in; but using MS Paint you erase the titles of the inbox as well as your name. Only the following information is shown
...
- 1
0
votes
1
answer
67
views
Virus from Embedded Image in Mac Mail?
I'm using macOS High Sierra, and mac Mail version 11.3. I have a script that uses the Twitter API to continually fetch tweets in real-time and send the contents of each of these tweets, including any ...
- 3
0
votes
1
answer
53
views
Suspicious ip address of our mail domain found on talosintelligence.com (spoofing attempt)
We have a fair amount of email traffic. Recently, we had some suspicious email spoofing attacks and a lot of users reported that outgoing emails were marked as spam and landed in junk folder (reported ...
- 3
0
votes
1
answer
26
views
Authorizing 3rd Party Envelope Sender to Impersonate Header Sender
Rewriting for clarity:
This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come ...
- 1
1
vote
0
answers
25
views
Email supposedly from the future mentioning fairly recent password [duplicate]
Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
- 11
0
votes
2
answers
56
views
Using Google Domains' Email Forwarding Service for throwaway accounts and other things
I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
1
vote
1
answer
82
views
Is authentication through mail clients safe when encryption is off?
When adding an account on a mail client, the SSL/TLS is usually turned off and the encryption method is 'none' (see Outlook example below).
Is the password safely sent through the internet when ...
- 13
1
vote
1
answer
84
views
Possible rogue admin monitoring my online activities
I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
- 773
1
vote
0
answers
56
views
iOS (iPhone) S/MIME certificate with multiple addresses
On an iPhone I have a mail account in the native Mail app with two distinct e-mail addresses, and a certificate that lists both of those e-mail addresses in the SAN field. When I try to send mail with ...
- 11
1
vote
0
answers
59
views
Is there a standard for fencing email domains to specific use cases?
To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases.
If it exists, I would presume that this might limit phishing attacks. Think of my question ...
- 195
0
votes
0
answers
43
views
How am I receiving emails addressed to an address not associated with my account?
I currently have a g-mail address (example@gmail.com). I recently received a message addressed to example@aol.com. Looking at the header I see my correct address in the Delivered-To: field but in the ...
- 61
0
votes
0
answers
51
views
Is it inappropriate at all for someone in my client organization to email their PEM file to me?
I have a SAML offering for my clients to access my cloud based application. Should I have a portal for them to upload their certificates or should I go the easy route and just have them e-mail them to ...
0
votes
1
answer
74
views
Making a phishing link look innocent
Situation
I am learning about phishing attacks using OSINT, social engineering and some Kali tools to send a mail to a dedicated target, which contains an 'appealing' message and an ngrok link leading ...
-1
votes
1
answer
67
views
Automated malicious links delivered with e-mail (Reddit, LinkedIn, Package) [closed]
Recently my organisation has been flooded with phishing e-mails with different approaches: pretending to be Reddit or LinkedIn information about a new follower or package delivery status/problems, etc....
- 353
1
vote
1
answer
127
views
Suspicious hyperlinks (all hex URLs) in e-mail
I'm communicating with a job headhunter over LinkedIn and he sent me an e-mail containing information about a position. However, I noticed that all of the hyperlinks in the e-mail (even the one on ...
- 115
0
votes
1
answer
48
views
Who is accessing my pop3 email accounts? [closed]
Recently I started receiving "Third-party application access to your Zoho Account" warning emails from Zoho.com regarding my Zoho email accounts, saying things like:
We noticed a third-...
- 315
0
votes
0
answers
40
views
How to make sure I don't accidentally blackhole a real e-mail address? [duplicate]
Every day, I get garbage e-mails from addresses such as "sevinckayaoglu@kentkoleji.com.tr" or "bushivddhclrrupeeeaqdnkwd@zstdbkzodgwvsii.us".
I have streamlined the process of &...
- 1
0
votes
1
answer
440
views
How does this scam email from a seemingly legit domain work?
I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
- 105
0
votes
1
answer
87
views
How did the email pass DKIM?
I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter.
Looking at the Header it looks like they passed the DKIM even though ...
- 3
0
votes
1
answer
70
views
Am I compromised if Microsoft can identify me without browser content? [closed]
I am using Windows 7 and I had to re-install Chrome recently.
In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
- 101
0
votes
1
answer
82
views
Secure PDF Document Transmission for US State Government Official
I have been requested to send a copy of a past year tax return to a US state office. I have been in contact with a tax official by email to send this copy through various means. This state is a few ...
0
votes
1
answer
70
views
Phishing and emails from icloud.com
Recently, various companies have been sending me emails from addresses like
support_at_example_com_r1a8nd4o6m7@icloud.com.
I used to be able to determine if an email was not a phishing email by ...
user272187
0
votes
0
answers
110
views
Sextorsion then Trojan
I received an email containing blackmail about videos that the hacker said he recorded. He said that he recorded the user of the laptop masturbating and he is asking for money to delete them otherwise ...
- 1
0
votes
2
answers
63
views
Business Email Compromise emails sent to personal email accounts
I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked.
However,...
- 101
-1
votes
1
answer
105
views
checking if 2 emails were communicate with each other [closed]
Is there a way to check if 2 email addresses have ever communicate with each other?
Maybe with SMTP servers?
4
votes
0
answers
187
views
Disturbing/suspicious Google notifications about account recovery and password change
This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
- 141
5
votes
2
answers
841
views
How to fix DMARC alignment failure
I'm sending emails via the Ionos mail servers.
I've got spf set up, but dmarc still fails.
This seems related to: Why is DMARC failing when SPF and DKIM are passing?
But I can't figure out how to fix ...
1
vote
1
answer
72
views
How are validation links getting triggered by a third party?
Question: It appears that somebody can intercept and read emails that I send from my server, although
I have set up 2-Factor authentification for sudo-access
I log all logins on my server (Did not ...
- 11
0
votes
1
answer
58
views
Cpanel Phising Link
Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is
redirect url
https://example.net/esg9/cpanel.php?token=...
0
votes
2
answers
1k
views
Can an HTML attachment in an email contain a virus?
I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
0
votes
1
answer
207
views
Guidance on Storing Email Addresses as Hashes
I am building an application where one user (User A) can store a "query" of another user (User B) that may or may not exist in the system. This query can be done by email address.
The ...
- 155
1
vote
2
answers
134
views
report bribery: snail mail vs email vs SMS
Say I live in a western country and suspect a foriegn businessperson is trying to bribe local officials. I am provided with 3 options to report: snail mail, email and SMS. For my threat model, I am ...
- 13
1
vote
1
answer
84
views
SPF records and spoofing
Lets say we have this SPF record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all`
And this record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all
What ...
- 11
0
votes
1
answer
135
views
Email and purchase order history
I have a common email (gmail, outlook, mail, etc) provider that I use to purchase from different merchants (amazon, target, etc).
Since some of these providers have had breaches before, do there exist ...
- 149
0
votes
0
answers
62
views
Sending emails as other persons from internal network in Outlook Online
So today in work I tried making an SMTP email to our local mailserver. Using colleagues email name I sent an email to another colleague. The email didn't fall in spam and it actually showed the ...
0
votes
3
answers
242
views
If email is an insecure medium, why are usernames and passwords sent via email (albeit in separate ones)?
At work we are using a secure file transfer utility that, after setting it up, sends you and the participants you want to share those files with, two emails. One email contains the randomised username,...
- 195
0
votes
0
answers
111
views
Unknown Cause of SPF Fail
I have the following SPF record:
v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all
Although I have included _spf.mailspamprotection.com in my SPF record, ...
- 101