Collaborate Disseminate
I have an asp.net web app that generates emails when users perfrorm actions…these emails are generally notifications to other users that they should see/do something. The users can be internal to the company, or external (s… Continue reading How to securely store user-specific mail server credentials at the server side of a web application
In light of recent news about some flaws in PGP standard, I (a non-PGP user) started to think how secure are regular e-mails these days.
I have found the STARTTLS Everywhere project, and they have a very worrying warning:
… Continue reading How secure is e-mail landscape right now?
Recently I’ve set up two SMTP auth-enabled sendmails, and within a week and month both of them were used to send unsolicited mail using SMTP AUTH. Attackers were acting from different IP and using different users – but only o… Continue reading SMTU AUTH and compromised user
so, I’m pretty sure that my parents have email forwarding on my inbox, and I’m interested on how it’s done. Let me first say that I don’t care that it’s being done, they are my parents after all, but it interests me that it c… Continue reading Unknown Email Forwarding
The free and open source network forensics tool NetworkMiner now comes with improved extraction of files and metadata from several protocols as well as a few GUI updates. But the biggest improvements for version 2.3 are in the commercial tool NetworkMi… Continue reading NetworkMiner 2.3 Released!
I am communicating through email with a scammer who is trying to by me mw own parcel of land. I already contacted the police but it could take 2 to 3 months before they start investigating. I want to get the IP address of the… Continue reading How to get the IP Adress of an email receiver
Currently, we know few compression attacks on the SSL/TLS protocol (such as Crime or Breach). I wonder for few days if these attacks are practicable on a mail server (smtp). Is CRIME attack practicable on a mail server ?
… Continue reading SSL/TLS compression attacks on mail servers (smtp)
I’m trying to send an email from the terminal, and this error pops up.
I would like to know another way to have a valid certificate or something to fix this issue. What are the alternatives?
My command IS similar to the fo… Continue reading sendemail from terminal [on hold]
SMTPS (implicit SSL) has been deprecated/obsolete since SMTP+STARTTLS (explicit SSL) was defined in RFC2487. I’m not entirely clear on the reasoning behind that, but it was clearly considered a good idea at the time.
SMTP uses STARTTLS extension to upgrade SMTP to SMTP Secure (STMPS). According the the RFC, the client and server starts TLS as follows:
S: <waits for connection on TCP port 25>
C: <opens connection>
S: 220… Continue reading What happens if STARTTLS dropped in SMTP?