Re: getross - email privacy /security of system
"RossARR" <[email protected]>
| Newsgroups | gmane.mail.pine.general |
|---|---|
| Message-ID | <[email protected]> |
> On Mon, 30 Oct 2006, Bert Driehuis wrote: >> As Kenneth Crudup wrote, it's trivial for a mail administrator to >> access any Pine mailbox. >> one big drawback: if the user loses his private key (or the passphrase >> to it), he will lose all his e-mail, with absolutely no recourse. > On Mon, 30 Oct 2006, Alexey Toptygin wrote: > It has the even bigger drawbacks that the MDA will see the messages > unencrypted before they are delivered, and that root can still read your > email while you have it decrypted in memory so that you can read it (and > for that matter, root can steal your private keys while you're using > them to decrypt mail). There is no known way to hide information from > the owner of the hardware it's being processed on. If you're worried Forgetting passwords & keys is a necessary risk for security I accept. I am aware of Hushmail.com, using PGP - viable to a large degree for security in the way they handle keys, passphrases, & email files. Encrypted point to point, yet still an in-house security threat I suppose. The process is not on my PC. As Alexey said above: "There is no known way to hide information from the owner of the hardware it's being processed on." -- that says it all. Yet if processing information, all data, is on my system with PC-Pine, encrypted before sent from my PC, no transfer exposure exists, & the mail operator would not be processing anything. Just transfering encrypted files. I am aware encryption exists in client software like Mozilla, Outlook Express, etc., yet not sure of reliability or quality. But I prefer Pine, a PGP-PC-Pine would be nice. Maybe a bug into somebodies ear could eventually create a PGP version, or is there a version or plug-in now? -- RossARR [email protected] mrossarr.imapmail.org ---end-of-message--- -- http://www.fastmail.fm - The way an email service should be _______________________________________________ Pine-info mailing list [email protected] http://mailman1.u.washington.edu/mailman/listinfo/pine-info