Questions tagged [email]

Related to email protocols, clients, servers, content, and message format.

Filter by
Sorted by
Tagged with
0
votes
1answer
63 views

Are e-mails that have a name slightly different from the web page legitimate e-mails?

I usually receive e-mails from an organization called Change.org, that is a site for create on-line petitions (it's site is https://www.change.org/). The thing is, they send me e-mails with ...
0
votes
0answers
51 views

Is there a bank in the United States that uses email encryption with S-MIME or GPG? [closed]

We just founded a subsidiary in the United States. For this new legal entity, we also need a bank account. With our bank account manager in Germany, we can encrypt our emails using the S-MIME protocol....
0
votes
1answer
40 views

Should email password be encrypted in a django app when using TLS?

I have seen multiple videos/tutorials regarding how to setup the email system in Django. It seems that they all assume as long as the password is stored in an environmental variable, no encryption is ...
0
votes
1answer
86 views

Is it a myth that signing up for social media puts your email open for phishing attacks?

So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder. This suspects me that operating a social ...
0
votes
1answer
54 views

Does having secondary email for 2FA increase security

Bank account have portals that one can access online. After entering my uname/password, OTP is sent via SMS to mobile phone. After entering OTP and password again, one is allowed access to online ...
0
votes
4answers
126 views

Is exposing email delivery failure to a user a security risk?

Case 1: When user creates an account, a confirmation email is sent. Case 2: When user invites a coworker to his/her account, an invitation email is sent. Problem: If a user makes a typo in the email, ...
1
vote
2answers
144 views

Why isn't there a protocol to exchange PGP keys?

Why isn't there a defined protocol to retrieve PGP keys from a destination mail server? Or am I just not searching with the right parameters? I imagine a quite simple process like other established ...
0
votes
0answers
10 views

When sending email to Gmail address from netcat or openssl s_client, why do I get "Username and Password not accepted", despite correct credentials [migrated]

My goal was to send an email to a gmail address, like beta@gmail.com from a commandline tool such as netcat or telnet etc. WHAT I TRIED: I first tried netcat. nc -C smtp.gmail.com 587 220 smtp.gmail....
-1
votes
1answer
51 views

Does gmail use SPF or DMARC when sending messages outside of gmail?

I can't seem to find any record of SPF or DMARC in the original messages coming from gmail to my mail server. Does gmail use SPF or DMARC when sending messages outside of gmail?
0
votes
3answers
107 views

Sending Mail from Different Server SPF Record

Firstly, i'm not a mail expert! My workplace owns the domain example.com, until recently we had an application hosted on the LAN that worked fine and sent emails from info@example.com to various ...
0
votes
3answers
122 views

Is it safe to open email links in a private window?

Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
0
votes
1answer
120 views

Is there any security risk in sending a dangerous file via email to oneself?

Most common email services don't allow to attach file like exe files, or similar files that may contain security threats to a computer. This can be bugging for users, but I can understand that, in ...
0
votes
1answer
77 views

Is there a way to know when someone tries to guess your gmail password?

Is there a way to check if someone is trying to login to my Gmail account without knowing the password (so they keep trying to guess the password and failing repeatedly or trying to guess the answers ...
0
votes
1answer
80 views

Company sent me a registration email with a clear text password [duplicate]

I recently signed up for a company's product, and promptly received an email confirming my registration, showing both my email address and my password. I'm not a security expert, but that was a huge ...
1
vote
2answers
70 views

What is the point of having SPF and DKIM set up, but having DMARC with policy=none?

Under this FAQ it says that using policy=none is a way for domain owners to monitor forged emails, without having to set up SPF/DKIM. But what im wondering, because i dont fully understand what SPF/...
0
votes
0answers
60 views

How many emails and accounts an organization's administrator and developer should have?

Let's say there is a small organization called "Example" with the registered domain "example.com". There is a person, Bob, who has full control over the organization's GitHub ...
0
votes
0answers
53 views

How to detect and prevent phishing attacks on Gmail via Logging and DLP?

We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
0
votes
0answers
54 views

Confirm User Account Without Exposing IP of Server?

Right now, when a user signs up for a new account on my site, the server sends the user a email verification link. When the user clicks the verification link, the link redirects to my server to ...
0
votes
0answers
47 views

Account enumeration on verification-less signup

Is there a way to prevent account enumeration on signup page if access to the site is not requiring you to verify your email? The scenario is as following: Sign up for a site with email+password, but ...
0
votes
2answers
181 views

Why are there so many special characters in this phishing link?

I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd: The link that victims are supposed to click looks very weird ...
1
vote
2answers
103 views

Do fowarded emails retain DMARC protection?

Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
1
vote
2answers
74 views

Inbox filling up with "confirm your registration" emails - what kind of attack is this? [duplicate]

My google inbox is filling up with hundreds and hundreds of "please confirm your new account on our website" messages. A coworker reports he had the same thing happen to him a couple of ...
-1
votes
2answers
138 views

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
3
votes
1answer
206 views

Is using email (protonmail with Tor Browser / obfs4 bridges) to contact embassy in potentially hostile foreign countries safe?

Suppose one wants to use email (say using protonmail with Tor Browser / obfs4 bridges) to discuss sensitive matters (such as asylum seeking / embassy protection) with embassy in potentially hostile ...
0
votes
2answers
98 views

Can you trust a VPS service not to log data?

Like the title says, can you trust a VPS service not to log any data? Is creating your own email server with a VPS service really a private solution?
0
votes
0answers
43 views

How can you tell if an email is really from the address it claims it's from? [duplicate]

I am creating a basic website contact form. It requires entering a 'from' email address. I entered a dummy email address, which I do not control, yet the email is still sent, and, to the recipient, it ...
0
votes
2answers
52 views

Sending password in separate email [duplicate]

I've noticed some services will send a username in one email with a note saying the password will come in a different email. Is there any point to this? It seems that if someone can get that email ...
0
votes
1answer
120 views

Is an owned domain + self hosted email the closest to owning one's online identity? Are there better alternatives?

Most online accounts identify users using email/phone & password; but since most all email/phone is handled by another service (e.g. Gmail), one's online identity only exists so long as these ...
0
votes
1answer
127 views

My IP Address is on 3 blacklists

I noticed my email address (my email address is through a web host where I also host my website) was being bounced from one or more professional email subscriber lists. Through MX Tools I see that my ...
0
votes
1answer
137 views

Emails being sent to strange addresses

I use Yahoo Mail from Android devices. In my Sent box over the last few weeks I see a handful of completely blank e-mails (no subject and no contents) being sent to very strange addresses such as: ...
1
vote
2answers
122 views

How to check if a mail server is Enforced-STARTLS rather than Opportunistic-STARTTLS?

This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop ...
0
votes
1answer
56 views

How to merge two email boxes securely with an email box fetcher?

I have two email boxes: The first one is my main email box in Gmail and the second one is in my website hosting company by Thunderbird which I access from my website hosting manager (WHM) which is ...
0
votes
2answers
94 views

Would Thunderbird's cache be affected by ransomware?

My university was hit by ransomware. I wanted to know if it was possible that Thunderbird emails were also affected. (Mails saved in the cache, encrypted or not, etc.)
0
votes
1answer
89 views

Can the hosting provider who has access to the email server machine, access the emails?

I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
0
votes
1answer
82 views

Email server compromise?

My company sends around 1M emails per month through various providers (Sendgrid etc.). One of emails we send is a "sign up" email, which contains a link for a user to finish registering ...
0
votes
4answers
139 views

How to protect email addresses in a customer database when you and other third parties must be able to send emails?

I am wondering what methods are used by big companies to protect customer email addresses in their databases. They usually have salespeople all over the world and multiple third-parties (Salesforce, ...
3
votes
1answer
120 views

Does disabling "Always display external images" in Gmail remove the risk of spam senders seeing that I opened the mail?

When a mail is opened that includes special images, fonts or media, it is loaded from the server of the sender. This is bad because spammers can detect active mail accounts that will get more spam. ...
0
votes
1answer
131 views

Should I use my own domain in my proton mail?

Using my own domain on Proton Mail is cool, but what if someone hack my namecheap account? What if some government orders that my domain is redirected? Should I use @protonmail instead of @mydomain? ...
0
votes
1answer
339 views

Is this is phishing attempt?

I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit (account-security-noreply@accountprotection.microsoft.com) but the problem is, the email ...
1
vote
2answers
58 views

User-provided phrase to verify email sender- Is this a good idea?

Signing up for a medical records service today, in addition to security questions (sigh) I was prompted with a field that read: Security Phrase for Email Messages: Your security phrase will be ...
0
votes
0answers
20 views

Why are secure links in emails rapidly opened by multiple IP addresses [duplicate]

We have some functionality in our system which sends emails to our customers, where the emails contain secure links with an embedded code. Whilst inspecting our firewall logs I noticed something ...
0
votes
1answer
56 views

Do email providers somehow validate/control "Send email as: " feature?

I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
3
votes
0answers
126 views

Are external email warnings effective?

Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
0
votes
1answer
55 views

Account import into gmail - is it considered safe? [closed]

From my Gmail account / settings, I can import another mailing account (for example a Microsoft Exchange account). Then Google asks for my personal Microsoft Exchange password (! this is not very &...
0
votes
1answer
55 views

How to enumerate PGP keyring e-mails related to a specific ccTLD

I would like to enumerate all possible PGP e-mails related to North Korean top-level domain .kp Few years ago I would have used theHarvester but I recently discovered that this useful tool doesn't ...
0
votes
1answer
132 views

Standard form of email signature

A little bit of background: I want to sign my emails for my own safety. None of my intended recipients are users of digital signatures. If one day someone were to impersonate me, I can prove my own ...
0
votes
1answer
60 views

Link test differs from link location in plaintext view is not visible in Thunderbird

Today I noticed something strange. I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link. However, in ...
0
votes
1answer
74 views

On Gmail I received an Incoming TLS Encrypted Message. Will my reply be encrypted by default to different email provider?

If I receive an incoming TLS encrypted message from another email provider like outlook/hotmail, will my reply in transit from gmail to outlook/hotmail be encrypted by default as well?
0
votes
0answers
167 views

Got this email from google, Critical Security Alert Someone knows your password, what does this mean? [duplicate]

Got this email in December 2020, after it arrived, I immediately changed the password.... this was a legit mail from google(I checked the sender and all that). So what does this email mean? It was ...
27
votes
6answers
6k views

How can I get more spam for my honeypot?

Spam is everywhere and everyone gets it (especially professors), but I noticed that my personal email does not get much spam. How can I get more? What are the most common ways of getting spam? Not ...

1
2 3 4 5
34