Say that a user has an email account at the company he works for. Before going on vacation he activates his cool “vacation auto-reply” feature that adds<\/p>\n
Out of Office – I will be back from holidays at the end of July.<\/p><\/blockquote>\n
on the top and then quotes the email he was sent.<\/p>\n
During his vacation, he receives a call and he is told he has to urgently sent an email about some financial updates. He rushes to an internet cafe and sends the email. He makes a mistake though and mistypes one of the email addresses of the recipients. Instead of sending the email to “user@domain.com” he sends it at “usar@domain.com”.<\/p>\n
His company’s SMTP server though receives the following error message from the remote SMTP server while trying to deliver the email:
\n<usar@domain.com>: host mx.domain.com[1.2.3.4] said: 550 5.1.1\n <usar@domain.com>... User unknown (in reply to RCPT TO command)<\/code2><\/pre><\/p>\n This means that his SMTP server will then send an email to him informing him about the error and quoting parts if not all of the email he had previously sent. The email will likely appear to be from “postmaster@company.com” or “do-not-reply@company.com” or something similar.
\nIt will look like this:
\nThis is the mail system at host mail.company.com.\n\nI'm sorry to have to inform you that your message could not\nbe delivered to one or more recipients. It's attached below.\n\nFor further assistance, please send mail to postmaster.\n\nIf you do so, please include this problem report. You can\ndelete your own text from the attached returned message.\n\n The mail system\n\n<usar@domain.com>: host mx.domain.com[1.2.3.4] said: 550 5.1.1\n <usar@domain.com>... User unknown (in reply to RCPT TO command)\nReporting-MTA: dns; mail.company.com\nX-Postfix-Queue-ID: AE4812AE328\nX-Postfix-Sender: rfc822; employee1@company.com\nArrival-Date: Thu, 5 May 2011 20:05:27 +0200 (CEST)\n\nFinal-Recipient: rfc822; usar@domain.com\nOriginal-Recipient: rfc822;usar@domain.com\nAction: failed\nStatus: 5.1.1\nRemote-MTA: dns; mx.domain.com\nDiagnostic-Code: smtp; 550 5.1.1 <usar@domain.com>... User unknown\n\nFrom: Loyal Employee <employee1@company.com>\nDate: July 5, 2011 9:05:29 PM GMT+03:00\nTo: User User <usar@domain.com>\nSubject: Re: Financial updates\n\nFinancial data goes here\n<\/code2><\/pre><\/p>\n But the user has still his vacation auto-reply turned on, so when the automatic postmaster’s email reaches his mailbox, the system will automatically reply back to the “postmaster@company.com” quoting the previous email and adding his auto-reply message:<\/p>\n
Out of Office – I will be back from holidays at the end of July.<\/p><\/blockquote>\n
So the postmaster@company.com currently has all the financial details that he shouldn’t!<\/p>\n
Apart from the fact that the user was sending financial data to somebody else in a clear text email instead of an encrypted one, the second biggest mistake that the user has made was that he has enabled vacation auto-replies that quote<\/b> the email he was previously sent. That’s very very wrong. If you don’t want sensitive stuff ending at the postmaster’s inbox avoid quoting previous emails in your auto-replies by all means.<\/p>\n
Based on a true story \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"
Say that a user has an email account at the company he works for. Before going on vacation he activates his cool “vacation auto-reply” feature that adds Out of Office – I will be back from holidays at the end of July. on the top and then quotes the email he was sent. During his […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"footnotes":""},"categories":[5,4],"tags":[395,247,596,394],"class_list":["post-1218","post","type-post","status-publish","format-standard","hentry","category-internet","category-privacy","tag-auto-reply","tag-email","tag-privacy","tag-vacation"],"aioseo_notices":[],"views":16082,"_links":{"self":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/1218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/comments?post=1218"}],"version-history":[{"count":2,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/1218\/revisions"}],"predecessor-version":[{"id":1220,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/1218\/revisions\/1220"}],"wp:attachment":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/media?parent=1218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/categories?post=1218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/tags?post=1218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}