Freron MailMate

Comments and changes to this ticket

• 

  benny 2017-12-06 08:54:06 UTC

  • State changed from “new” to “reproduced”

  I'm looking into it.

• 

  benny 2017-12-06 14:48:10 UTC

  • State changed from “reproduced” to “fixcommitted”

  There's a test release available now (r5440): Hold down ⌥ when clicking “Check Now” in the Software Update preferences.

• You flagged this item as spam.
  

  hadmob 2017-12-06 15:05:35 UTC

  I've tried the fix but it doesn't seem to be working. The From header still often contains the fake potus@whitehouse.gov address alone, and even when it is both that and the demo@mailsploit.com address in the header, when you reply, you send mail To: potus@whitehouse.gov.

  • mailsploit.png 270 KB
• 

  benny 2017-12-06 15:14:06 UTC

  Well, it works in the sense that MailMate now identifies the correct email address in all cases. The “From” column shows the “name” part of the From headers which just happens to be email addresses. But I'll think about what I can do to make this less deceptive. Maybe I should simply disallow anything that looks like an email address in the name part...

  When replying, MailMate respects the “Reply-To” email header. That's just email by design (although granted, probably bad design).

  Email spoofing has always been easy -- even without the Mailsploit techniques.

• You flagged this item as spam.
  

  hadmob 2017-12-06 15:36:52 UTC

  Yes, perhaps some kind of marking the name part, such as printing it in italics or something, would be good to have. Or filtering it out alltogether, but that can be just as confusing as leaving it there unmarked.

  Maybe a special warning flag such as ☠️ or similar could be shown alongside all suspicious headers, i.e. those that use special formatting that indicates mailsploit attack. And on mouse-over it could just explain itself in a bubble, and perhaps show the unparsed header to the user.

• 

  benny 2017-12-08 11:35:31 UTC

  I've now gone with a solution where @ is replaced with a skull whenever the name part of an address header contains @. It should show up quite rarely, because MailMate now also ignores it when the name part contains the same email address as the address part. This is in the latest test release and it only affects displayed names -- it does not affect searching or any other features.

• You flagged this item as spam.
  

  hadmob 2017-12-10 18:04:31 UTC

  Great, thank you.

• 

  benny 2017-12-13 14:10:37 UTC

  • State changed from “fixcommitted” to “fixreleased”

  [bulk edit]

• 

  benny 2024-12-25 16:11:23 UTC

  [bulk edit]