Can NERM detect email bounce?

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Does somebody has experience if it is possible to detect in NERM if the target a registration invitation email is sent to does not exist?
It would be from security perspective very good to know this to cancel this immediately.
If somebody knows this, this mailbox can be created and a attack scenario can be created from this.
Highly appreciated any experience that is shared.

2

Hey Martin.@martin_greck-riederer,
NERM doesn’t detect if the email exists or NOT, it simply sends the email and gives option to resend it.

I do NOT know what happens in the backend, but on UI NERM does not show if the email sent by NERM indeed sent to an existing email..

Thank you,
Vaibhav

3

Thanks Vaibhav! Yes we are not presenting that information in any non-protected areas. Any information regarding invalid email addresses that result in a bounce, is considered sensitive data, and the proper controls are in place to prevent unauthorized access.

4

thanks for your replies.
But does it mean that it could be detected, right?
It would helps us to remove invalid registrations immediately