Jump to content
|Topic||Stats||Last action by|
|College Hackers Are Changing F's To A's||
|Apple Patents Android-Like Gesture Unlocking Tech For Mobile Devices||
|Issue upgrading to Windows 8.1||
|This Is the End of FB We Know It||
|Microsoft Research's IllumiRoom concept morphs into SurroundWeb||
Posted 21 May 2012 - 13:05
Posted 21 May 2012 - 13:13
Posted 21 May 2012 - 13:19
Why would you be seeing a SSL cert when opening up mail from paypal? I just looked at some email from paypal in in gmail, invoices and such for use of it. Official stuff, and there is no cert from paypal that I can see in there.
Are you saying the email was signed with a vmware cert?
Could you give some more details of how and when your seeing this.
Posted 21 May 2012 - 14:02
Posted 21 May 2012 - 14:35
but live mail is a online service is it not? So that would cert for any email on their server?
I will have to file up the live mail client and check it out.. I have a live.com address, but just view it online - I don't use the client.
Have to run for work, but will check on it later today. What does it show in that details section.. Might be able to get a few clues to where the cert is coming from.
Authentication-Results: hotmail.com; sender-id=pass (sender IP is 188.8.131.52) firstname.lastname@example.org; dkim=pass header.d=paypal.co.uk; x-hmca=pass X-SID-PRA: email@example.com X-SID-Result: Pass X-DKIM-Result: Pass X-Message-Status: p:1:n X-AUTH-Result: PASS Received: from mx0.slc.paypal.com ([184.108.40.206]) by BAY0-MC4-F12.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Mon, 21 May 2012 01:06:20 -0700 DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws; s=dkim; d=paypal.com; h=DKIM-Signature:Received:Date:Message-Id:Sender:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version; DKIM-Signature: v=1; a=rsa-sha1; d=paypal.co.uk; s=dkim; c=relaxed/relaxed; q=dns/txt; firstname.lastname@example.org;;
Posted 21 May 2012 - 15:51
Posted 21 May 2012 - 16:02
Posted 21 May 2012 - 16:11
Posted 21 May 2012 - 16:20
so show that url ashttp://images.paypal.com/en_US/i/logo/logo_emailheader_113wx46h.gi=
that image url is not https from what you posted. The link off click the image would be https://www.paypal.com which I show as a valid cert signed by verisign.
yeah gi seems wrong to me as well.. But from the code you listed that image would not be over a https connection.
Can you sniff your traffic while you create the problem, so we can see where its going to get this cert. Happy to look at the sniff if you send to me in PM, if you don't feel like posting public that sort of info.
I would be VERY curious as well to what is causing this - I would be worried about attempts to mitm your ssl traffic, etc! More than likely its just a goof up on something.. But until you track down what is causing it, it is very wise to be concerned.
Posted 21 May 2012 - 16:24
Posted 21 May 2012 - 16:28
but that https link is a link right, not a source of some image or anything?
<span = class=3D=22xptFooter=22>Copyright =A9 1999-2012 PayPal. All rights = reserved.<br/><br/>PayPal (Europe) S.=E0 r.l. et Cie, = S.C.A.<br/>Soci=E9t=E9 en Commandite par Actions<br/>Registered Office: = 5th Floor 22-24 Boulevard Royal L-2449, Luxembourg<br/>RCS Luxembourg B = 118 349</span><br/><br/><span style=3D=22color: =23333333;font-family: = arial,helvetica,sans-serif;font-size:11px;=22><span class=3D=22xptFooter = ppid=22>PayPal Email ID PP843</span></span><img height=3D=221=22 = width=3D=221=22 = src=3D=22https://102.112.2O7.net/b/ss/paypalglobal/1/G.4--NS/123456?pageNam= e=3Dsystem_email_PP843=22 border=3D=220=22 = alt=3D=22=22/></td></tr></table></div></body></html>=
Posted 21 May 2012 - 16:40
at the bottom of any page.</p><p>Copyright =A9 2012 = PayPal. All rights reserved.<br/><br/>PayPal (Europe) S.=E0 r.l. et Cie, = S.C.A.<br/>Soci=E9t=E9 en Commandite par Actions<br/>Registered office: = 22-24 Boulevard Royal, L-2449 Luxemburg<br/>RCS Luxemburg B 118 = 349</p><img height=3D=221=22 width=3D=221=22 = src=3D=22https://102.112.2O7.net/b/ss/paypalglobal/1/G.4--NS/123456?pageNam= e=3Dsystem_email_PP1003=22 border=3D=220=22 alt=3D=22=22/><p = class=3D=22xptFooter ppid=22>PayPal Email ID = PP1003</p></td></tr></table></div></body></html>=
Posted 21 May 2012 - 17:29
Posted 21 May 2012 - 18:04
Posted 23 May 2012 - 00:37