Results 1 to 2 of 2

Thread: Rewriting username data in REST url or e-mail address is disclosed

  1. #1
    j2b's Avatar
    j2b
    j2b is offline Special Member
    Join Date
    Sep 2008
    Location
    Latvia
    Posts
    165
    Rep Power
    6

    Default Rewriting username data in REST url or e-mail address is disclosed

    We noticed, that our ZCS users start sharing their resources over internet (e.g. sharing Briefcase folders with images). There are several uses:

    - putting links to such resources (View only) on forums over internet;
    - sharing such resources in their websites (photos or calendars).

    ZCS in this case is working OK. But the problem arrieses in disclosing usernames to public in such cases. Because of multidomain installation, we use single https URL for login for all domains, and provide full e-mail address as a username.

    Because we can not guaranty correct operations of such internet resources, where such links are posted, nor there are widely available rewrite functions, as such username does not displays in a single e-mail manner, to be hidden by e.g. SpamSpan, or a like, there is a potential for such e-mail address harvesting for SPAM list generation purposes.

    I am aware of a "virtual hosts" possibility, but this does not solve an issue, as it increases expenses per domain due to SSL certs and in final, still does not hide potential combination of user's e-mail address, as username (Account name) is e-mail address data to the left of "@" symbol.

    Could somebody recommend any solution or personal practice for this?

  2. #2
    j2b's Avatar
    j2b
    j2b is offline Special Member
    Join Date
    Sep 2008
    Location
    Latvia
    Posts
    165
    Rep Power
    6

    Default

    I recently stepped over this new zimlet: Short URL for Briefcase | Zimbra :: Gallery

    But still, this issue is active. Any other solutions to build it in-house and integrate with Zimbra?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  2. Replies: 20
    Last Post: 03-18-2008, 05:37 AM
  3. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 04:55 PM
  4. Installed OK - Can send but not recieve email
    By gregbazar in forum Installation
    Replies: 3
    Last Post: 11-05-2005, 04:56 PM
  5. Mail not getting to mail boxes
    By ehults in forum Installation
    Replies: 5
    Last Post: 10-31-2005, 09:24 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •