Warning about Pegasus Mail and PGP (fwd)

anonymous-remailer at shell.portal.com anonymous-remailer at shell.portal.com
Sat Dec 9 13:08:42 PST 1995


Forwarded message.

From: investor at flood.xnet.com (Investortools)
Newsgroups: alt.security.pgp
Subject: warning about PMail-PGP
Date: 9 Dec 1995 00:47:46 GMT
Organization: XNet - A Full Service Internet Provider - (708) 983-6064
Lines: 5
Message-ID: <4aambi$e33 at flood.xnet.com>
NNTP-Posting-Host: cyclone.xnet.com
X-Newsreader: TIN [version 1.2 PL2]

I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
it doesn't sign or encrypt the message until just before
transmitting it.  So it stores your PGP private key password
with the message until it sends it.








More information about the cypherpunks-legacy mailing list