Questions tagged [email]

Related to email protocols, clients, servers, content, and message format.

Filter by
Sorted by
Tagged with
0
votes
1answer
45 views

How can I perform a brute force attack on a webmail site which has no firewall and has an unlimited amount of tries? [closed]

My professor made this site for us and gave us a project to find the password if we have the email. Is it possible? Not sure if this is relevant, but the site isn't HTTPS also
-1
votes
0answers
31 views

How can I brute-force the email id to reveal the email hidden behind the asterix in an account recovery page? [closed]

I know it is not possible to directly decode the asterisk. But that's when something struck my mind. If the hidden email is to******h@g****.com, and the person's name is Tom Smith, the email could be ...
23
votes
6answers
6k views

If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?

I've been trying to figure out "practical encryption" (AKA "PGP") for many years. As far as I can tell, this is not fundamentally flawed: I know Joe's e-mail address: cool_joe@gmail.com. I have a ...
86
votes
4answers
14k views

Is using 'dot' and 'at' in email addresses in public text still useful?

When entering your email address publicly, a practice is to replace . with text dot and @ with text at. I assume that the reasoning is that this way automatic email-collector robots won't match your ...
0
votes
2answers
94 views

Someone is using my email to create online accounts; what should I do? [duplicate]

I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
0
votes
0answers
24 views

I've been an emailed a password; how can I proceed as securely as possible? [duplicate]

I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
0
votes
1answer
62 views

Force specific encryption cipher for S/MIME mails

I have a number of contacts who can only decrypt 3DES, when it comes to S/MIME encrypted mails. I'm aware that this is by far not ideal, but better than no encryption at all. My problem is, that I ...
0
votes
1answer
108 views

Filtering Obfuscated Spam Emails In Exchange

So the past few weeks we have been trying to cut back on the amount of spam reaching our users in our organization. We have been successful in implementing hard filtering rules like if an email ...
1
vote
2answers
452 views

Bypassing NET::ERR_CERT_DATE_INVALID

When I try to access the Openmailbox web site, Google Chrome returns a NET::ERR_CERT_DATE_INVALID error: "openmailbox.org normally uses encryption to protect your information. When Google Chrome ...
0
votes
2answers
119 views

High bounce rate due to attacker is using website's mail system

We got a realatively high bounce rate today, because someone decided to spread some links using our mail server. The implementation looked like this: He used the registration form and planted a link ...
2
votes
1answer
167 views

If my protonmail password is compromised, does that potentially mean that my whole account is, permanently?

My (limited) understanding is that my password is used to encrypt the keys which are used to encrypt my mail messages on protonmail's servers. Does that mean that knowledge of my password could ...
0
votes
3answers
111 views

E-Mail privacy proxy for hiding real e-mail?

Do E-Mail proxy services exists to improve privacy and security? Privacy in the sense that one wouldn't need to give a website his/her username (possibly even in the firstname.lastname@domain.tld ...
0
votes
2answers
96 views

Phishing emails - What do I look for?

I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one? There are some things I know to look for already but I want to get moer ...
0
votes
1answer
49 views

DMARC & failing SPF

I would like to clarify the following scenario with DMARC, (assuming there is a publish DMARC policy): SPF fails No (aligned or any) DKIM records Should result of DMARC check be none or fail? ...
0
votes
0answers
31 views

Do we need SPF when we have DKIM? [duplicate]

I always thought that to authenticate email we needed both SPF and DKIM (and DMARC). But email is confusing and recently I found myself asking why we can't do with just SPF or DKIM. I then discovered ...
5
votes
2answers
4k views

Finding DKIM selectors without mailing

Is there any way to find out what selectors are used by a domain in their DKIM record without access to an e-mail send from that domain? So to clarify, let's say I know example.com has DKIM ...
0
votes
2answers
205 views

What to do with a suspicious email from someone I know (seemingly using the real mail of that person)?

TL;DR, I think this mail was sent by mail.okgroup.cz. Not sure though, I would like confirmation. I just got a mail from my sister with no subject and only a link. NOTE; That the email used in this ...
5
votes
1answer
4k views

How to send an encrypted mail only knowing the PGP fingerprint?

How does one send an encrypted email with PGP, when he only has the recipient's fingerprint? I am already sending emails using PGP, but I've just pulled a contact's PGP fingerprint who I need to ...
0
votes
2answers
147 views

Do spammers use legitimate email marketing companies?

Every so often I will find myself on a mailing list that I know I didn't sign up for. This always gets me very cautious and I treat the junk mail as hostile spam - don't click, just delete and ignore. ...
1
vote
0answers
41 views

Why have a password at all? [duplicate]

Consider the following common security scenario: I need to log in with an email and password. I can't remember my password so I click "forgot password" Website emails me a password reset link. I can ...
4
votes
2answers
325 views

E-Mail attachments can be opened using their URL in webmail even after logging off

My E-Mail is on Bell Net. I noticed today what I thought was a major security hole. Then I wasn't sure so I wanted to post this. I discovered that even though I have logged off my E-Mail, I can still ...
9
votes
3answers
194 views

Is there a benefit to using a different email for every online account?

I have a domain email address which in addition to being able to create multiple mail accounts allows the creation of aliases for each inbox. Is there any benefit to security in using a different ...
0
votes
0answers
29 views

How is this entity spoofing a PayPal email address? [duplicate]

Someone I know received an email from service@intl.paypal.com claiming to be a receipt for a purchase on their account. However, looking at the from line, there's another email next to the PayPal one ...
3
votes
2answers
144 views

Can someone read my email if they have my smtp credentials?

Assume Mallory knows the server, username and password that Alice uses to send email via smtp. Can Mallory read Alice's email? Does it depend on the specific system or configuration?
-1
votes
1answer
63 views

Is it possible to setup email servers to encrypt communication in transit?

I understand that generally email communication is insecure by default and would like to know if its possible to setup email servers so that the emails get encrypted when sent between hosts. I want ...
2
votes
2answers
217 views

It's possible to make an account in mainstream social media without giving them my phone number or have a phone number that can identify you?

I'm learning about privacy and security and one of the tips everyone always talk about is compartmentalization, I'm trying to do this and get rid of my old profiles in social media (one of them have ...
45
votes
8answers
9k views

Why do email server/clients block executable attachments?

If I send an email with an .exe attachment to an Outlook recipient, the email client blocks the attachment and the recipient has no way of overriding this security setting (short of making certain ...
2
votes
3answers
231 views

Password reset vs change

My webapp has "password reset" and "password change" functionality. Password "reset" is typical: user clicks "I forgot my password", enters his email, one-time link emailed there, he visits a form to ...
22
votes
6answers
9k views

Why would someone want to block images in email?

While there is the possibility that this is just to prevent people from viewing offensive images against their will, somehow I don't think that's the reason why pretty much every email client defaults ...
65
votes
5answers
14k views

My email address is being used to enroll for online services. Should I be concerned?

Just before Christmas I received the following message in one of my GMail accounts: Sign-in attempt was blocked ********@gmail.com [redacted by me] Someone just used your password to try to ...
0
votes
0answers
44 views

Packaging Python code for github: should I obfuscate author email address from the `setup.py`?

The standard file with packaging instructions (setup.py with setuptools) for Python contains an author_email field. Such a package can then be published to PyPI, but the code is also available ...
0
votes
1answer
107 views

Deeplinks in email that autologin

I'm wondering if a deep link in an e-mail that automatically authenticate even though the session is expired is GDPR compliant. For instance if I send an e-mail to a user with links to the internal ...
0
votes
2answers
417 views

Is this login flow via an authenticated email account safe?

I want to have users log in by entering an email, and then proving that they control that email. I only care that they do control the email, and so want to avoid add another password to the process if ...
89
votes
5answers
30k views

Why would someone open a Netflix account using my Gmail address?

This is something that happened to me a few months ago. I don't know if it is a hack attempt, although I can't think of any way that there could be any danger or any personal information gained. I ...
1
vote
3answers
169 views

POST requests are bypassing PHP checks

I have a website with a contact form on PHP and a mail server. Email are sent with the help of PHP mail function like so $name = cleanInput($_POST["name"]); $e = $_POST["email"]; $email = filter_var(...
0
votes
0answers
42 views

Email signature with PKCS11?

While S/MIME has been a PKCS7 standard, what happens while I sign/encrypt an email using a smart card implementing PKCS11? Is PKCS7 supported as kind of backward compatibility?
2
votes
1answer
61 views

ISP Email Issue on Port 25 [closed]

My ISP, a small, local “mom & pop” outfit, provides my email services. For the last six months or so, my main email account frequently fails to update with the following message, “Could not ...
1
vote
2answers
198 views

TLS downgrade attacks

I'm currently looking at e-mail security and wondered whether server to server e-mail communication that enforces TLS, will prevent the risk of TLS downgrade attacks?
2
votes
1answer
89 views

Solution to block email sending to domains with typo error

I'm trying to find a solution to block the sending of emails to domains with typo errors in it, for example gmai.com or outlok.com. I am working for a client who uses Office 365 that would like to ...
7
votes
2answers
2k views

spam with my own domain

At my work we have a very tricky issue with spam. We use postfix, and recently began to receive several spam mails from our own domain. This is obviously very prejudicial for us, because many ...
3
votes
1answer
106 views

Putting personal Data in E-Mail vs sending password in plaintext to access that data

I started working on a service that sends out mails with a link to a registration form. (e.g. a registration for a movie premier) The link would look like this https://movie-premier.com/rsvp/USERCODE ...
1
vote
1answer
257 views

DMARC and SPF are setup for my non-www domain but doesn't work for www

My website is up and running on www.example.com and I am sending automated emails from my email address support@example.com. DMARC and SPF seem to setup accordingly: _dmarc : v=DMARC1;p=none;pct=100;...
1
vote
1answer
62 views

Can someone redirect or block emails of a specific sender?

I’m expecting some information from a governmental organisation, they claim that they already send the info via email, but I have never received anything. They also have an automatic reply email, ...
3
votes
1answer
212 views

Why are my emails going to spam?

I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
5
votes
3answers
177 views

How to prevent spam when sender email is never the same? [closed]

Recently, I have been massively spammed by emails, and unsubscribing via the link doesn't work. Another option is to block the sender, but the problem is that the sender email is never the same. It's ...
7
votes
2answers
357 views

Why do we receive contact form spam with random characters?

For the last two weeks we have been receiving a form of spam through our website contact form that I haven't seen before. It looks like this: Name: iYvNgmpTLwxqaCj Company: lqidQuVNMhIJsz E-...
0
votes
1answer
67 views

emails were send from my own email address [closed]

A friend of mine has just received an email from my exactly own email adrress. What could this be and how do I stop it?
1
vote
2answers
268 views

Forcepoint secure email

I just got an email from a financial institution in answer to a question I raised with them. It came in the form of a "secure email" from Forcepoint, which requires you to open an HTML document and ...
1
vote
0answers
80 views

Is it possible to hijack specific e-mail with remote access? [closed]

I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
111
votes
10answers
30k views

Why is it dangerous to open a suspicious email?

I would like to know why is it considered to be dangerous to open an email from an unknown source? I am using Gmail and I thought it's only unsafe to download an attachment and run it. The first ...

1 2 3 4 5 30