Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [email]

Related to email protocols, clients, servers, content, and message format.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

How does pretty good privacy works for authentication and confidentiality?

I needed to study about these 2 topics. So I picked up a keyword "pretty good privacy" "authentication" "confidentiality" and searched for books in libgen google books I ...
user avatar
  • 1
30 votes
4 answers
7k views

Can I prove that I did not receive an email?

A company are saying they sent an email to me. I have gone through all of my inbox, junk, and deleted files and the email still doesn’t exist. They have asked me to prove the email never got to me by ...
user avatar
  • 301
0 votes
2 answers
69 views

Does my receiver have a public key for email encryption?

I'm using an email service with encryption option and I need to send an encrypted email. So if I need my letter to be sent encrypted, I need to take my receiver's public encryption key and apply it to ...
user avatar
  • 11
0 votes
2 answers
51 views

How can I receive a (spam) email from an unknown email address?

When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
user avatar
  • 123
0 votes
1 answer
46 views

Email TLS coverage for forwarded recipient email address

When an email recipient server (say server-A) is configured to forward to another email addresses (on say server-B), is TLS applied all the way up to server-B, or does it end at server-A, or something ...
user avatar
  • 103
0 votes
0 answers
25 views

Do I have to check the fingerprint of new received OpenPGP public key, if it has been sent in a signed and encrypted email from a verified source?

I asked this question before at https://askubuntu.com/questions/1404973/do-i-have-to-check-the-fingerprint-of-new-received-openpgp-public-key-if-it-has and the answer to my question was "This ...
user avatar
0 votes
0 answers
30 views

Spam investigation and email reputation check

We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
user avatar
  • 3
0 votes
2 answers
85 views

Is the text of an email subject line a softer target for surveillance than the text in the body?

After using PGP for a long time I have trained myself to write bland email subject lines that disclose little or nothing about the contents. Some people I correspond with unencrypted have an annoying ...
user avatar
  • 357
0 votes
1 answer
115 views

Is it safe to use AnonAddy or SimpleLogin for email address security?

I was intrigued with AnonAddy and SimpleLogin. They provide an email address forwarding service to prevent leakage of your real email address. I just want to ask if they really hide my real email ...
user avatar
0 votes
2 answers
56 views

How to check the authenticity of an outlook email attachment (.msg)?

let's say that someone sends me a business email on Microsoft outlook 365. I save the email as an attachment (email.msg) How a third person can make sure that the email attachment is not edited (...
user avatar
  • 109
3 votes
2 answers
471 views

Cipher suite choice on macOS on Apple Silicon

I have a postfix mail server that accepts these cipher suites: tls_high_cipherlist=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384: ...
user avatar
  • 627
0 votes
0 answers
8 views

Click on a link in a malicious email - how can i be hacked? [duplicate]

I accidentally clicked a link in a malicious email. The link has opened in my browser. I have not entered any username and password to login in. Could I have been hacked? I'd like to know what could ...
user avatar
2 votes
3 answers
572 views

Securing Email: use GPG for all emails?

I am thinking of using GPG to sign commits and particularly to secure emails, and have some questions regarding the usefulness. Basic threat model (I use LESP as abbreviation for large email service ...
user avatar
  • 29
-1 votes
1 answer
75 views

What might happen if you post a local URL?

To show something in a forum you capture a page of an email service after logging in; but using MS Paint you erase the titles of the inbox as well as your name. Only the following information is shown ...
user avatar
  • 1
0 votes
1 answer
67 views

Virus from Embedded Image in Mac Mail?

I'm using macOS High Sierra, and mac Mail version 11.3. I have a script that uses the Twitter API to continually fetch tweets in real-time and send the contents of each of these tweets, including any ...
user avatar
  • 3
0 votes
1 answer
53 views

Suspicious ip address of our mail domain found on talosintelligence.com (spoofing attempt)

We have a fair amount of email traffic. Recently, we had some suspicious email spoofing attacks and a lot of users reported that outgoing emails were marked as spam and landed in junk folder (reported ...
user avatar
  • 3
0 votes
1 answer
26 views

Authorizing 3rd Party Envelope Sender to Impersonate Header Sender

Rewriting for clarity: This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come ...
user avatar
1 vote
0 answers
25 views

Email supposedly from the future mentioning fairly recent password [duplicate]

Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
user avatar
  • 11
0 votes
2 answers
56 views

Using Google Domains' Email Forwarding Service for throwaway accounts and other things

I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
user avatar
1 vote
1 answer
82 views

Is authentication through mail clients safe when encryption is off?

When adding an account on a mail client, the SSL/TLS is usually turned off and the encryption method is 'none' (see Outlook example below). Is the password safely sent through the internet when ...
user avatar
1 vote
1 answer
84 views

Possible rogue admin monitoring my online activities

I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
user avatar
1 vote
0 answers
56 views

iOS (iPhone) S/MIME certificate with multiple addresses

On an iPhone I have a mail account in the native Mail app with two distinct e-mail addresses, and a certificate that lists both of those e-mail addresses in the SAN field. When I try to send mail with ...
user avatar
1 vote
0 answers
59 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
user avatar
0 votes
0 answers
43 views

How am I receiving emails addressed to an address not associated with my account?

I currently have a g-mail address (example@gmail.com). I recently received a message addressed to example@aol.com. Looking at the header I see my correct address in the Delivered-To: field but in the ...
user avatar
0 votes
0 answers
51 views

Is it inappropriate at all for someone in my client organization to email their PEM file to me?

I have a SAML offering for my clients to access my cloud based application. Should I have a portal for them to upload their certificates or should I go the easy route and just have them e-mail them to ...
user avatar
0 votes
1 answer
74 views

Making a phishing link look innocent

Situation I am learning about phishing attacks using OSINT, social engineering and some Kali tools to send a mail to a dedicated target, which contains an 'appealing' message and an ngrok link leading ...
user avatar
-1 votes
1 answer
67 views

Automated malicious links delivered with e-mail (Reddit, LinkedIn, Package) [closed]

Recently my organisation has been flooded with phishing e-mails with different approaches: pretending to be Reddit or LinkedIn information about a new follower or package delivery status/problems, etc....
user avatar
  • 353
1 vote
1 answer
127 views

Suspicious hyperlinks (all hex URLs) in e-mail

I'm communicating with a job headhunter over LinkedIn and he sent me an e-mail containing information about a position. However, I noticed that all of the hyperlinks in the e-mail (even the one on ...
user avatar
0 votes
1 answer
48 views

Who is accessing my pop3 email accounts? [closed]

Recently I started receiving "Third-party application access to your Zoho Account" warning emails from Zoho.com regarding my Zoho email accounts, saying things like: We noticed a third-...
user avatar
  • 315
0 votes
0 answers
40 views

How to make sure I don't accidentally blackhole a real e-mail address? [duplicate]

Every day, I get garbage e-mails from addresses such as "sevinckayaoglu@kentkoleji.com.tr" or "bushivddhclrrupeeeaqdnkwd@zstdbkzodgwvsii.us". I have streamlined the process of &...
user avatar
  • 1
0 votes
1 answer
439 views

How does this scam email from a seemingly legit domain work?

I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
user avatar
  • 105
0 votes
1 answer
87 views

How did the email pass DKIM?

I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter. Looking at the Header it looks like they passed the DKIM even though ...
user avatar
  • 3
0 votes
1 answer
70 views

Am I compromised if Microsoft can identify me without browser content? [closed]

I am using Windows 7 and I had to re-install Chrome recently. In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
user avatar
  • 101
0 votes
1 answer
82 views

Secure PDF Document Transmission for US State Government Official

I have been requested to send a copy of a past year tax return to a US state office. I have been in contact with a tax official by email to send this copy through various means. This state is a few ...
user avatar
0 votes
1 answer
70 views

Phishing and emails from icloud.com

Recently, various companies have been sending me emails from addresses like support_at_example_com_r1a8nd4o6m7@icloud.com. I used to be able to determine if an email was not a phishing email by ...
user avatar
0 votes
0 answers
110 views

Sextorsion then Trojan

I received an email containing blackmail about videos that the hacker said he recorded. He said that he recorded the user of the laptop masturbating and he is asking for money to delete them otherwise ...
user avatar
0 votes
2 answers
63 views

Business Email Compromise emails sent to personal email accounts

I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked. However,...
user avatar
  • 101
-1 votes
1 answer
105 views

checking if 2 emails were communicate with each other [closed]

Is there a way to check if 2 email addresses have ever communicate with each other? Maybe with SMTP servers?
user avatar
4 votes
0 answers
186 views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
user avatar
  • 141
5 votes
2 answers
840 views

How to fix DMARC alignment failure

I'm sending emails via the Ionos mail servers. I've got spf set up, but dmarc still fails. This seems related to: Why is DMARC failing when SPF and DKIM are passing? But I can't figure out how to fix ...
user avatar
1 vote
1 answer
72 views

How are validation links getting triggered by a third party?

Question: It appears that somebody can intercept and read emails that I send from my server, although I have set up 2-Factor authentification for sudo-access I log all logins on my server (Did not ...
user avatar
  • 11
0 votes
1 answer
58 views

Cpanel Phising Link

Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is redirect url https://example.net/esg9/cpanel.php?token=...
user avatar
0 votes
2 answers
1k views

Can an HTML attachment in an email contain a virus?

I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
user avatar
0 votes
1 answer
207 views

Guidance on Storing Email Addresses as Hashes

I am building an application where one user (User A) can store a "query" of another user (User B) that may or may not exist in the system. This query can be done by email address. The ...
user avatar
  • 155
1 vote
2 answers
134 views

report bribery: snail mail vs email vs SMS

Say I live in a western country and suspect a foriegn businessperson is trying to bribe local officials. I am provided with 3 options to report: snail mail, email and SMS. For my threat model, I am ...
user avatar
1 vote
1 answer
84 views

SPF records and spoofing

Lets say we have this SPF record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all` And this record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all What ...
user avatar
0 votes
1 answer
135 views

Email and purchase order history

I have a common email (gmail, outlook, mail, etc) provider that I use to purchase from different merchants (amazon, target, etc). Since some of these providers have had breaches before, do there exist ...
user avatar
  • 149
0 votes
0 answers
62 views

Sending emails as other persons from internal network in Outlook Online

So today in work I tried making an SMTP email to our local mailserver. Using colleagues email name I sent an email to another colleague. The email didn't fall in spam and it actually showed the ...
user avatar
0 votes
3 answers
242 views

If email is an insecure medium, why are usernames and passwords sent via email (albeit in separate ones)?

At work we are using a secure file transfer utility that, after setting it up, sends you and the participants you want to share those files with, two emails. One email contains the randomised username,...
user avatar
0 votes
0 answers
111 views

Unknown Cause of SPF Fail

I have the following SPF record: v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all Although I have included _spf.mailspamprotection.com in my SPF record, ...
user avatar
  • 101

1
2 3 4 5
35