[45060] in Cypherpunks
Re: Warning about Pegasus Mail and PGP (fwd)
daemon@ATHENA.MIT.EDU (Jon Lasser)
Sat Dec 9 16:37:15 1995
Date: Sat, 9 Dec 1995 16:24:17 -0500 (EST)
From: Jon Lasser <jlasser@rwd.goucher.edu>
To: cypherpunks <cypherpunks@toad.com>
In-Reply-To: <199512092108.NAA11006@jobe.shell.portal.com>
On Sat, 9 Dec 1995 anonymous-remailer@shell.portal.com wrote:
> I just installed the "Open Encryptor" PGP interface for Pegasus Mail. I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
> it doesn't sign or encrypt the message until just before
> transmitting it. So it stores your PGP private key password
> with the message until it sends it.
Can anyone verify this?
Kinda brings new meaning to the term "Open Encryptor," huh?
Jon
------------------------------------------------------------------------------
Jon Lasser <jlasser@rwd.goucher.edu> (410)494-3072
Visit my home page at http://www.goucher.edu/~jlasser/
You have a friend at the NSA: Big Brother is watching. Finger for PGP key.
