8 results found

1. Protection des clés d'API

   Serait-il possible de conditionner la modification d'une clé secrète d'API à l'entrée préalable du mot de passe du compte de Mailjet ? Un hacheur ce week-end a tenté de se servir de la clé d'API d'un sous-compte en changeant sa clé d'API, après qu'on avait fait des modifications du compte principal comme suite à son piratage. S'il avait fallu entrer le nouveau mot de passe du compte Mailjet, j'imagine que le pirate n'aurait pas pu récidiver.

   ENGLISH
   API key protection
   Would it be possible to make the modification of a secret API key conditional on the prior entry of the Mailjet account password? A hacker this weekend tried to use the API key of a sub-account by changing its API key, after changes had been made to the main account following its hacking. Had it been necessary to enter the new password for the Mailjet account, I don't imagine the hacker would have been able to do it again.

   Serait-il possible de conditionner la modification d'une clé secrète d'API à l'entrée préalable du mot de passe du compte de Mailjet ? Un hacheur ce week-end a tenté de se servir de la clé d'API d'un sous-compte en changeant sa clé d'API, après qu'on avait fait des modifications du compte principal comme suite à son piratage. S'il avait fallu entrer le nouveau mot de passe du compte Mailjet, j'imagine que le pirate n'aurait pas pu récidiver.

   ENGLISH
   API key protection
   Would it be possible to make the modification of a secret API key conditional on the prior entry of the… more

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

2. Restriction par IP

   Bonjour,
   Compte tenu de la menace cybersécurité qui s'amplifie, je pense qu'il est judicieux d'implémenter une limitation par IP par compte/sous-compte.

   ENGLISH
   IP restriction
   Hello,
   Given the growing cybersecurity threat, I think it's a good idea to implement an IP restriction per account/sub-account.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

3. DKIM Rotation

   We need to rotate our certificates yearly, this includes the DKIM key. Please create a feature so that this can be rotated based on user request.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

4. Protect the SMTP API with GEO or IP fensing

   With this feature an API key will only allow requests from certain IP-addresses (ranges) of countries. This limits the risks when API keys are compromised.

   7 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

5. Implement DANE for outgoing mail authentication.

   DANE ensures that email is only deleverd over a secure path.

   See: https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

6. widget.modal.js lädt Schriften von Google Fonts - das ist NICHT DSGVO konform

   Wenn man ein Widget erstellt und z.B. die Ubuntu Schrift auswählt, dann wird diese auf der eingesetzten Seite von Google Fonts geladen. Das ist zumind. in Österreich nicht erlaubt und wird inzwischen gestraft, da es beim Laden der Google Fonts von den Google Servern zur Übertragung der IP Adresse kommt. - Wie kann man Widgets verwende ohne dass über das Script widget.modal.js eine Verbindung zu Google Fonts aufgebaut wird. Mailjet ist in diesem Fall NICHT DSGVO konform. - Ich bitte um Info um Schaden von meinen Kunden und mir abwenden zu können.

   widget.modal.js loads fonts from Google Fonts - this is NOT DSGVO compliant
   If you create a widget and select e.g. the Ubuntu font, it will be loaded from Google Fonts on the used page. This is at least in Austria not allowed and is now punished, because it comes when loading the Google Fonts from the Google servers to the transmission of the IP address. - How to use widgets without connecting to Google Fonts via the script widget.modal.js. Mailjet is NOT DSGVO compliant in this case. - I ask for info to be able to prevent damage from my customers and me.

   Wenn man ein Widget erstellt und z.B. die Ubuntu Schrift auswählt, dann wird diese auf der eingesetzten Seite von Google Fonts geladen. Das ist zumind. in Österreich nicht erlaubt und wird inzwischen gestraft, da es beim Laden der Google Fonts von den Google Servern zur Übertragung der IP Adresse kommt. - Wie kann man Widgets verwende ohne dass über das Script widget.modal.js eine Verbindung zu Google Fonts aufgebaut wird. Mailjet ist in diesem Fall NICHT DSGVO konform. - Ich bitte um Info um Schaden von meinen Kunden und mir abwenden zu können.

   widget.modal.js loads fonts from Google Fonts - this… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

7. Security
   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

8. API-Keys in Wordpress maskieren

   Hallo, vor einigen Monaten hat Mailjet die API-Keys im Kundenkonto aus Sicherheitsgründen maskiert.

   Im Mailjet-Wordpress-Plugin wurde dies jedoch nicht umgesetzt. Dort kann man die Schlüssel noch in Gänze einsehen.

   Wäre gut dies dort auch zu maskieren.

   Mask API keys in wordpress
   Hi, a few months ago Mailjet masked the API keys in the customer account for security reasons.

   However, this was not implemented in the Mailjet wordpress plugin. There you can still see the keys in their entirety.

   Would be good to mask this there too.

   0 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close