From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/36075 Path: main.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: security: Encrypted mail in the archive Date: 01 May 2001 13:08:12 +0200 Message-ID: References: NNTP-Posting-Host: coloc-standby.netfonds.no Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: main.gmane.org 1035171722 6644 80.91.224.250 (21 Oct 2002 03:42:02 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Mon, 21 Oct 2002 03:42:02 +0000 (UTC) Return-Path: Original-Received: (qmail 4811 invoked by alias); 1 May 2001 11:08:03 -0000 Original-Received: (qmail 4806 invoked from network); 1 May 2001 11:08:03 -0000 Original-Received: from dolk.extundo.com (195.42.214.242) by gnus.org with SMTP; 1 May 2001 11:08:03 -0000 Original-Received: from barbar.josefsson.org (slipsten.extundo.com [195.42.214.241]) (authenticated) by dolk.extundo.com (8.11.3/8.11.3) with ESMTP id f41B85o14451 for ; Tue, 1 May 2001 13:08:05 +0200 Original-To: ding@gnus.org In-Reply-To: (Andreas Fuchs's message of "Sun, 29 Apr 2001 16:48:39 +0200") Mail-Copies-To: nobody User-Agent: Gnus/5.090003 (Oort Gnus v0.03) Emacs/21.0.102 Original-Lines: 19 Xref: main.gmane.org gmane.emacs.gnus.general:36075 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:36075 Andreas Fuchs writes: > I just saw something that shocked me. I had sent an encrypted mail to a > friend of mine and tried to read it in the archive. Guess what? > > The mail that is stored in my archive group is not encrypted in any > way. I think it would be a little better, security-wise, to encrypt it > with _my_ pubkey (so that only the receipient and the sender can read > it) before storing it in a Gcc: location, would it not? Yes. I think OGnus is supposed to simply make a copy of the mail today, and if you want to be able to decrypt it yourself, you'll need to (setq mc-encrypt-for-me t) or something. But I don't understand why it's stored unencrypted for you. Are you sure encryption works at all (use preview)? How do the mail in your sent group look like? MML tags?