From a7b82bedf68d3f4f102c73fd0a8cebfb42872a0d Mon Sep 17 00:00:00 2001 From: M66B Date: Mon, 27 May 2024 07:54:29 +0200 Subject: [PATCH] Updated FAQ --- FAQ.md | 11 +++++++---- index.html | 8 ++++---- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/FAQ.md b/FAQ.md index c8e1897e56..302a6d5f63 100644 --- a/FAQ.md +++ b/FAQ.md @@ -1943,14 +1943,14 @@ Viewing remotely stored images (see also [this FAQ](#faq27)) and opening links m but will also leak your IP address. See also this question: [Why email's link is more dangerous than web search's link?](https://security.stackexchange.com/questions/241139/why-emails-link-is-more-dangerous-than-web-searchs-link). -This BBC article is worth reading: [Spy pixels in emails have become endemic](https://www.bbc.com/news/technology-56071437). +This BBC article is worth reading as well: [Spy pixels in emails have become endemic](https://www.bbc.com/news/technology-56071437). Opening attachments or viewing an original message might load remote content and execute scripts, that might not only cause privacy sensitive information to leak, but can also be a security risk. Note that your contacts could unknowingly send malicious messages if they got infected with malware. -FairEmail formats messages again causing messages to look different from the original, but also uncovering phishing links. +FairEmail formats messages again causing messages to look different from the original, but also uncovering phishing links, etc. Note that reformatted messages are often better readable than original messages because the margins are removed, and font colors and sizes are standardized. @@ -1959,7 +1959,7 @@ Since the images are downloaded from the source server [in real-time](https://bl this is even less secure because Google is involved too without providing much benefit. You can show images and original messages by default for trusted senders on a case-by-case basis by checking *Do not ask this again for ...*. -You might need to reset the questions via a button in the miscellaneous settings tab page. +You might need to reset the questions via a button in the miscellaneous-settings tab page.
@@ -3422,8 +3422,11 @@ Also, FairEmail can show a small red warning flag when DKIM, SPF or [DMARC](https://en.wikipedia.org/wiki/DMARC) authentication failed on the receiving server. You can enable/disable [authentication verification](https://en.wikipedia.org/wiki/Email_authentication) in the display settings. The feature depends on the header [Authentication-Results](https://datatracker.ietf.org/doc/html/rfc7601), which the receiving email server should add. -If the email server doesn't add an *Authentication-Results*, which is optional, +The shield will be green only if DMARC passes (=alignment) +and either [SPF](https://en.wikipedia.org/wiki/Sender_Policy_Framework) or [DKIM](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail) passes. +If the email server doesn't add an *Authentication-Results* header, which is optional, you can enable native DKIM in the debug panel, which appears when you enable debug mode in the miscellaneous settings tab page (last option). +In this case, the shield will be green only when DKIM passes and the signer domain matches that of the sender. Please be aware that this option will increase both data and battery usage. FairEmail can show a warning flag too if the domain name of the (reply) email address of the sender does not define an MX record pointing to an email server. diff --git a/index.html b/index.html index dec9958fe7..84b752c8f1 100644 --- a/index.html +++ b/index.html @@ -1143,13 +1143,13 @@ X-Google-Original-From: Somebody <somebody+extra@example.org>

(35) Why should I be careful with viewing images, attachments, the original message, and opening links?

🌎 Google Translate

Viewing remotely stored images (see also this FAQ) and opening links might not only tell the sender that you have seen the message, but will also leak your IP address. See also this question: Why email’s link is more dangerous than web search’s link?.

-

This BBC article is worth reading: Spy pixels in emails have become endemic.

+

This BBC article is worth reading as well: Spy pixels in emails have become endemic.

Opening attachments or viewing an original message might load remote content and execute scripts, that might not only cause privacy sensitive information to leak, but can also be a security risk.

Note that your contacts could unknowingly send malicious messages if they got infected with malware.

-

FairEmail formats messages again causing messages to look different from the original, but also uncovering phishing links.

+

FairEmail formats messages again causing messages to look different from the original, but also uncovering phishing links, etc.

Note that reformatted messages are often better readable than original messages because the margins are removed, and font colors and sizes are standardized.

The Gmail app shows images by default by downloading the images through a Google proxy server. Since the images are downloaded from the source server in real-time, this is even less secure because Google is involved too without providing much benefit.

-

You can show images and original messages by default for trusted senders on a case-by-case basis by checking Do not ask this again for …. You might need to reset the questions via a button in the miscellaneous settings tab page.

+

You can show images and original messages by default for trusted senders on a case-by-case basis by checking Do not ask this again for …. You might need to reset the questions via a button in the miscellaneous-settings tab page.


(36) How are settings files encrypted?

🌎 Google Translate

@@ -1836,7 +1836,7 @@ Y1 OK CAPABILITY completed

Note that a sender will automatically be blocked when a message is moved into the spam folder. You can disable this behavior by disabling the option Automatically block the sender when reporting spam in the behavior settings tab page.

Since version 1.2143, there is an “Unblock all” button in the receive-settings tab page, which will reset all above options.

If you receive a lot of spam messages in your inbox, the best you can do is to contact the email provider to ask if spam filtering can be improved.

-

Also, FairEmail can show a small red warning flag when DKIM, SPF or DMARC authentication failed on the receiving server. You can enable/disable authentication verification in the display settings. The feature depends on the header Authentication-Results, which the receiving email server should add. If the email server doesn’t add an Authentication-Results, which is optional, you can enable native DKIM in the debug panel, which appears when you enable debug mode in the miscellaneous settings tab page (last option). Please be aware that this option will increase both data and battery usage.

+

Also, FairEmail can show a small red warning flag when DKIM, SPF or DMARC authentication failed on the receiving server. You can enable/disable authentication verification in the display settings. The feature depends on the header Authentication-Results, which the receiving email server should add. The shield will be green only if DMARC passes (=alignment) and either SPF or DKIM passes. If the email server doesn’t add an Authentication-Results header, which is optional, you can enable native DKIM in the debug panel, which appears when you enable debug mode in the miscellaneous settings tab page (last option). In this case, the shield will be green only when DKIM passes and the signer domain matches that of the sender. Please be aware that this option will increase both data and battery usage.

FairEmail can show a warning flag too if the domain name of the (reply) email address of the sender does not define an MX record pointing to an email server. This can be enabled in the receive settings. Be aware that this will slow down synchronization of messages significantly.

If the domain name of the sender and the domain name of the reply address differ, the warning flag will be shown too because this is most often the case with phishing messages. If desired, this can be disabled in the receive settings (since version 1.1506).

If legitimate messages are failing authentication, you should notify the sender because this will result in a high risk of messages ending up in the spam folder. Moreover, without proper authentication there is a risk the sender will be impersonated. The sender might use this tool to check authentication and other things.