Can you tell me what the original URL was?

I expect that what's supposed to happen is that the original URL gets escaped 
as necessary (aka "mangled"), tacked on at the end of a redirect to our 
security service, proofpoint.com, and that when they get the URL they reverse 
the translation, decide if it's OK, and (usually) send it on.  The odd thing 
here was that it was not blocked, but it was messed up.

Is the error message I got from your site what you would expect if the URL were 
used twice?  Maybe if proofpoint.com did a "pre-check" that would explain why 
it failed.
Ross

________________________________________
From: Henrik Pauli <[email protected]>
Sent: Monday, December 9, 2019 3:46 AM
To: Boylan, Ross
Cc: [email protected]
Subject: Re: [Eric] Unable to register with issue tracker

Sounds like an issue with your email system than anything else.  Best if you 
take it to your sysadmins.

3D is the ASCII code of the equals sign, so it could be that something mangled 
URL encoding or Quoted-Printable encoding (both use an escape character -- % 
and =, respectively -- and the byte code of the character escaped), and this is 
why whatever you click on doesn't seem to lead anywhere.  If there are URLs 
that are use-once, them checking on them and opening them might be even worse.

On Sat, 7 Dec 2019 at 08:24, Boylan, Ross 
<[email protected]<mailto:[email protected]>> wrote:
I tried to create an account with the eric issue tracker; it emailed me a 
message instructing me to click on a link to complete the process.  When I did 
so, I reached the site but a banner near the top said 'No such otks 
"wfk4....."' where ... represents a long string of characters.

This mailing list also wanted me to click on a URL to confirm, but offered an 
email reply as an alternative, which I think worked.

Our local security software rewrites all URLs in email to route them through 
some security system, but I believe they end up resolving to the original URL, 
which is part of the rewritten URL.  The rewritten URL appears to have 3D 
immediately before the code indicated in the message, and it looks as if 3X 
(where X is various letters) might be some kind of separator.

At any rate, if there's some way to register that would be nice.

Ross
_______________________________________________
Eric mailing list
[email protected]<mailto:[email protected]>
https://www.riverbankcomputing.com/mailman/listinfo/eric<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.riverbankcomputing.com_mailman_listinfo_eric&d=DwMFaQ&c=iORugZls2LlYyCAZRB3XLg&r=nh70E5-mX2XsDe5lrDDMt_ZRqqGMcdTmTrRLvNmttYA&m=6TIzJbkj3rqKgkzSfL3JDF9zawKJTr_D8dbzgUPVmJE&s=gpTbgwYChb1gVbQxwUL36x6F6XixhuK3HNc2lVq7a_0&e=>
_______________________________________________
Eric mailing list
[email protected]
https://www.riverbankcomputing.com/mailman/listinfo/eric

Reply via email to