Re: getross - email privacy /security of system

Alexey Toptygin <[email protected]>
Newsgroups gmane.mail.pine.general
Message-ID <[email protected]>
On Mon, 30 Oct 2006, Bert Driehuis wrote:

> As Kenneth Crudup wrote, it's trivial for a mail administrator to access any 
> Pine mailbox.
>
> It is theoretically possible to protect against that (by encrypting all 
> mailboxes with the mailbox owners' public keys). However, this has one big 
> drawback: if the user loses his private key (or the passphrase to it), he 
> will lose all his e-mail, with absolutely no recourse.

It has the even bigger drawbacks that the MDA will see the messages 
unencrypted before they are delivered, and that root can still read your 
email while you have it decrypted in memory so that you can read it (and 
for that matter, root can steal your private keys while you're using them 
to decrypt mail). There is no known way to hide information from the owner 
of the hardware it's being processed on. If you're worried about the owner 
of the box spying on you, then don't use that box at all.

 			Alexey
_______________________________________________
Pine-info mailing list
[email protected]
http://mailman1.u.washington.edu/mailman/listinfo/pine-info
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.