Warning about Pegasus Mail and PGP (fwd)

[Jon Lasser]

On Sat, 9 Dec 1995 anonymous-remailer at shell.portal.com wrote:

> I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
> it doesn't sign or encrypt the message until just before
> transmitting it.  So it stores your PGP private key password
> with the message until it sends it.

Can anyone verify this?

Kinda brings new meaning to the term "Open Encryptor," huh?

Jon
------------------------------------------------------------------------------
Jon Lasser                <jlasser at rwd.goucher.edu>            (410)494-3072 
          Visit my home page at http://www.goucher.edu/~jlasser/
  You have a friend at the NSA: Big Brother is watching. Finger for PGP key.