Security issue in email from Zoho Support Team
I just observed one of the emails from 'Zoho Team Member' (
support@zohorecruit.com) and because it landed into the 'Spam' folder I was scrutinizing its Internet Headers.
The email is signed by the actual member (in the body). In my case it was by someone called 'Marichamy'. However the Internet Headers are too very generic. In the worst case after a few days if the particular support staff is no longer associated with the team and there is a purported fraud committed by him, I believe, it would be little difficult to trace out the same because the support id is shared.
I think it would be wiser if the support emails also carry a header like X-Support-Sender: and reflect at least the actual sender's name (if not the full id).
Would that be more bullet-proof support infrastructure?
----
Deepak Vasudevan
http://thamizhththendral.blogspot.com/