<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>You might find this useful: <a href="https://wiki.zimbra.com/wiki/Security_Center#ZWC_affected_by_Mailsploit" data-mce-href="https://wiki.zimbra.com/wiki/Security_Center#ZWC_affected_by_Mailsploit">https://wiki.zimbra.com/wiki/Security_Center#ZWC_affected_by_Mailsploit</a></div><div><br data-mce-bogus="1"></div><div style="padding-left: 30px;" data-mce-style="padding-left: 30px;">- The short summary is 8.8.7 included the change that should have new installs with zimbraPrefShortEmailAddress set to FALSE, but sites that upgrade need to make this change manually (this wasn't forced upon upgrade due to the fact that it is a fairly visible change for end users)<br></div><div><br data-mce-bogus="1"></div><div>Phil<br data-mce-bogus="1"></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Barry de Graaff" <info@barrydegraaff.tk><br><b>To: </b>"Thor" <thor918@gmail.com><br><b>Cc: </b>"users" <users@lists.zetalliance.org><br><b>Sent: </b>Thursday, October 4, 2018 5:00:36 PM<br><b>Subject: </b>Re: [Users] Impersonate emails<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><div dir="ltr"></div><div dir="ltr">I had a discussion about this with Zimbra and since Mailsploit, I believe the consensus is that putting it to FALSE is the safest.</div><div dir="ltr"><br></div><div dir="ltr">Also maybe for new installations the default is FALSE, had a discussion about that, but not sure that ever made GA.</div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">Regards Barry</div><div dir="ltr"><br>On 4 Oct 2018, at 21:40, Thor <<a href="mailto:thor918@gmail.com" target="_blank">thor918@gmail.com</a>> wrote:<br><br></div><blockquote><div dir="ltr"><div dir="ltr"><div dir="ltr">ah thanks.<br><div>found the attribute for it</div><br><div><div><attr id="1173" name="zimbraPrefShortEmailAddress" type="boolean" cardinality="single" optionalIn="account,cos" flags="accountInherited,domainAdminModifiable" since ="7.0.1"></div><div> <defaultCOSValue>TRUE</defaultCOSValue></div><div> <desc>show just the display name of email addresses in the message header area and compose pane</desc></div><div></attr></div></div><br><div>so I can set it in COS :)</div><br><div>what do you have it set to for all user as default?</div><br><div>-Thor-</div><br></div><br><div class="gmail_quote"><div dir="ltr">On Thu, 4 Oct 2018 at 21:15, Aaron Cayard-Roberts <<a href="mailto:cayaraa@earlham.edu" target="_blank">cayaraa@earlham.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
You can disable the name only when viewing a message by turning off "Display names in place of email addresses when available". Its found at the very bottom of the General settings.<br>
<br>
<br>
-Aaron<br>
<br>
----- On Oct 4, 2018, at 3:11 PM, Thor <a href="mailto:thor918@gmail.com" target="_blank">thor918@gmail.com</a> wrote:<br>
<br>
> <a href="https://forums.zimbra.org/viewtopic.php?t=59714" rel="noreferrer" target="_blank">https://forums.zimbra.org/viewtopic.php?t=59714</a><br>
> <br>
> How do others deal with users that fall for emails that tries to trick by<br>
> using same title as real persons they normaly communicate with? I know you<br>
> could mouseover. any other suggestions on how to deal with those on zimbra?<br>
<br>
-- <br>
Aaron Cayard-Roberts<br>
System and Security Administrator<br>
Information Technology Services<br>
Earlham College<br>
801 National Road West<br>
Richmond, IN 47374<br>
Phone: 765-983-1851<br>
</blockquote></div></div>
</div></blockquote><br></div></div><br><br><br>
<p style="width:60%; font-size:8pt; border-top:1px solid #666; color:#666; font-family:'Calibri','Arial','Helvetica',sans-serif;">
This message and any attachment may contain information that is confidential and/or proprietary. Any use, disclosure, copying, storing, or distribution of this e-mail or any attached file by anyone other than the intended recipient is strictly prohibited. If you have received this message in error, please notify the sender by reply email and delete the message and any attachments. Thank you.</p></body></html>