LESSON 9 E-MAIL SECURITY part I

Table of Contents

9.0 Introduction
9.1 How E-mail Works
9.1.1 E-mail Accounts
9.1.2 POP and SMTP
9.1.3 Web Mail
9.2 Safe E-mail Usage Part 1: Receiving
9.2.1 Spam, Phishing and Fraud
9.2.2 HTML E-Mail
9.2.3 Attachment Security
9.2.4 Forged headers
9.3 Safe E-mail Usage Part 2: Sending

9.3.1 Digital Certificates
9.3.2 Digital Signatures

9.3.3 Getting a certificate
9.3.4 Encryption

9.3.5 How does it work？
9.3.6 Decryption

9.3.7 Is Encryption Unbreakable？
9.4 Connection Security

 

目录

9.0 简介

9.1 E-mail的工作原理

9.1.1 E-mail账户

9.1.2 邮局协议和简单邮件传输协议

9.1.3 网页邮件

9.2 安全邮件使用 第一部分：接收邮件

9.2.1 垃圾邮件和诈骗邮件

9.2.2 超文本电子邮件

9.2.3 附件安全

9.2.4 伪造的邮件标题

9.3 安全邮件使用 第二部分：发送邮件

9.3.1 数字认证

9.3.2 数字签名

9.3.3 获得执照

9.3.4 加密

9.3.5 怎样工作的？

9.3.6 解密

9.3.7 解密工作难攻克吗？

9.4 联机安全

 

9.0 Introduction
Everyone uses e-mail. It is the second most used application on the internet next to your web
browser. But what you might not realize is that a significant portion of network attacks and
compromises originate through e-mail. And with respect to your privacy, misuse of e-mail has
the potential to disclose either the contents of your message, or give a spammer information
about you. The purpose of this module is to give you information on how e-mail works, safe email
usage, e-mail based attacks, and security strategies for e-mail.

 

9.0 简介

几乎每个人都使用电子邮件。它是互联网中除了网络浏览器外用得最多的应用程序。但你可能不会了解网络攻击行为和源头有很大一部分都是通过电子邮件。为了保护你的隐私，对电子邮件的错误操作可能不仅会暴露你发送邮件的内容，也会发送出关于你的一些信息。这个模块讲述的目的是给你介绍电子邮件工作原理，安全邮件使用方法，依靠电子邮件发动的攻击，以及关于电子邮件的安全使用方法。

 

9.1 How E-mail Works
Just like airmail is sent through the air, 'e'-mail is sent through the 'e' – the 'e' in this case being
the web of electronic connections within and between the networks that make up the
Internet. When you send an e-mail from your computer, the data is sent from your computer
to an SMTP server. The SMTP server then searches for the correct POP3 server and sends your
e-mail to that server, where it waits until your intended recipient retrieves it.

 

9.1 E-mail的工作原理

航空邮件是通过飞机运送的，一样的，电子邮件是通过电运送的---这里的“电”是指组成因特网的网络中的各种电子连接网页。

当你用你的电脑发送一封邮件，数据就被发送到了简单邮件传输协议的服务器上。之后该服务器查找相应的邮局通信协议服务器，将你的电子邮件发送过去，直到你发送的接收用户接收为止。

 

9.1.1 E-mail Accounts
E-mail accounts are available through many different sources. You may get one through
school, through your work or through your ISP. When you get an e-mail account, you will be
given a two part e-mail address, in this form: username@domain.name. The first part,
username identifies you on your network, differentiating you from all the other users on the
network. The second part, domain.name is used to identify your specific network. The
username must be unique within your network, just as the domain name must be unique
among all the other networks on the Internet. However, user names are not unique outside of
their networks; it is possible for two users on two different networks to share user names. For
example, if there is one user with the address bill@bignetwork.net, there will not be another
user on bignetwork.net whose user name is bill. However, bill@bignetwork.net and
bill@smallnetwork.net are both valid e-mail addresses that can refer to different users.
One of the first things that you will do when you are setting up your e-mail is to enter your email
address into your e-mail client program. Your e-mail client is the program that you will use
to send and receive e-mails. Microsoft's Outlook Express may be the most widely known (since
it comes free with every copy of a Microsoft operating system), but there are many others
available for both Windows and Linux, including Mozilla, Eudora, Thunderbird and Pine.

 

9.1.1 电子邮件账户

电子邮件账户可以通过各种方式创建。可以通过学校，工作或者ISP。当你创建了一个电子邮件账户后，你就会得到一个由两部分组成的电子邮件地址，以下面这种形式：username@domain.name。第一部分，通过用户名在网络中识别你的账户，第二部分，域名是用来识别你使用的网络。用户名必须是唯一的，就像域名在因特网中所有网络中都必须唯一一样。用户名可以在不同的网络中重复使用，不同网络中的两个用户可以使用同一个用户名。例如，如果一个用户的邮件账户地址是bill@bignetwork.net，在bignetwork.net中就再不能有用户名为bill的邮件账号，但是，bill@bignetwork.net和bill@smallnetwork.net却是两个有效的邮件地址。当你对你的电子邮件进行管理时，第一件事就是登陆你的邮件客户端。该客户端是你进行收发邮件的地方。Microsoft的Outlook Express可能是最有名的邮件客户端了（自从它被免费的装载到每一台新的电脑上），但是Windows和Linux都有其它很多有用的电子邮件客户端，包括Mozilla, Eudora, Thunderbird 和 Pine.