Collaborate Disseminate
Is there an easy way to test an SMTP server to check for configuration issues associated with STARTTLS encryption, and report on whether it has been configured properly so that email will be encrypted using STARTTLS?
Think of the Qualys S… Continue reading Test STARTTLS configuration of SMTP server
After reading about STARTTLS and SSL and performing a scan/pentest at our server I have the next question regarding security:
Is this STARTTLS warning below a security-vulnerability? And if so why?
As far I understand STARTT… Continue reading Is STARTTLS a security-vulnerability?
Many of my users today got email from docs#@mydomain.com (where docs# was between docs0 and docs8 or so, and mydomain.com is obviously changed from my real domain name), with the sender name of “Administrator.” The message h… Continue reading Email Spoofing by SMTP Message-ID?
Let us say that I send an email using Yahoo Mail or GMail. Can this email be intercepted using a packet sniffer?
On which port does the email travel? HTTP, SMTP, POP3?
Continue reading What are the ports used by Online Email Accounts such as Yahoo Mail, Gmail, etc.?
Suppose that I send an E-mail to someone.
Is it possible to fake mail server address – for example, while I used my own local mail server, I send it as if it was sent from Microsoft mail server. (I know that I can fake my ma… Continue reading Is it possible to fake the mail server address?
I would like to ask what happens when an email is sent from Gmail, Yahoo or Hotmail public web email services?
I don’t understand email protocols in details, but as far as I know email traffic is unencrypted and the messages are passed alo… Continue reading What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?