Thats why the systems should be able to fish out based on for example 
Message-ID, and for additional security, AES-256 encrypt the message with the 
SHA256 hash of the message ID.Of course only abuse department should have 
access to these tools.Thus you dont need to rummage through people's inboxes or 
retain cleartext copies of other peoples messages, just copy+paste message ID 
into some retrieve system and its all set.The message ID could be viewed as an 
"password" saying you are authorized to view the message.This can additionally 
be used for per-item access key in the inbox.
-------- Originalmeddelande --------Från: Jaroslaw Rafa via mailop 
<mailop@mailop.org> Datum: 2023-03-22  11:29  (GMT+01:00) Till: 
mailop@mailop.org Ämne: Re: [mailop] Sendgrid abuse forwarding to Google - not 
one of your brightest ideas Dnia 22.03.2023 o godz. 10:01:53 Sebastian Nielsen 
via mailop pisze:> A good idea when you get this type of response, just include 
the full> headersand not the actual body of message.A competent abuse 
department> should be able to fish out a verbatim copy of the message being 
reported> in their logging systems using the headers alone.I would not trust 
any email provider who is able to do this - because thismeans that they are 
either: a) logging and storing all your emails (if theyare able to do this even 
if the message is not stored in sender's mailbox);or b) snooping through users' 
mailboxes (if they are able to do this only ifthe message is stored in sender's 
mailbox, by pulling it out from there).-- Regards,   Jaroslaw Rafa   
r...@rafa.eu.org--"In a million years, when kids go to school, they're gonna 
know: once therewas a Hushpuppy, and she lived with her daddy in the 
Bathtub."_______________________________________________mailop mailing 
listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to