Freron MailMate

Comments and changes to this ticket

• 

  benny December 6th, 2017 @ 08:54 AM

  • State changed from “new” to “reproduced”

  I'm looking into it.

• 

  benny December 6th, 2017 @ 02:48 PM

  • State changed from “reproduced” to “fixcommitted”

  There's a test release available now (r5440): Hold down ⌥ when clicking “Check Now” in the Software Update preferences.

• You flagged this item as spam.
  

  hadmob December 6th, 2017 @ 03:05 PM

  I've tried the fix but it doesn't seem to be working. The From header still often contains the fake potus@whitehouse.gov address alone, and even when it is both that and the demo@mailsploit.com address in the header, when you reply, you send mail To: potus@whitehouse.gov.

  • mailsploit.png 269.7 KB
• 

  benny December 6th, 2017 @ 03:14 PM

  Well, it works in the sense that MailMate now identifies the correct email address in all cases. The “From” column shows the “name” part of the From headers which just happens to be email addresses. But I'll think about what I can do to make this less deceptive. Maybe I should simply disallow anything that looks like an email address in the name part...

  When replying, MailMate respects the “Reply-To” email header. That's just email by design (although granted, probably bad design).

  Email spoofing has always been easy -- even without the Mailsploit techniques.

• You flagged this item as spam.
  

  hadmob December 6th, 2017 @ 03:36 PM

  Yes, perhaps some kind of marking the name part, such as printing it in italics or something, would be good to have. Or filtering it out alltogether, but that can be just as confusing as leaving it there unmarked.

  Maybe a special warning flag such as ☠️ or similar could be shown alongside all suspicious headers, i.e. those that use special formatting that indicates mailsploit attack. And on mouse-over it could just explain itself in a bubble, and perhaps show the unparsed header to the user.

• 

  benny December 8th, 2017 @ 11:35 AM

  I've now gone with a solution where @ is replaced with a skull whenever the name part of an address header contains @. It should show up quite rarely, because MailMate now also ignores it when the name part contains the same email address as the address part. This is in the latest test release and it only affects displayed names -- it does not affect searching or any other features.

• You flagged this item as spam.
  

  hadmob December 10th, 2017 @ 06:04 PM

  Great, thank you.

• 

  benny December 13th, 2017 @ 02:10 PM

  • State changed from “fixcommitted” to “fixreleased”

  [bulk edit]