Re: security: Encrypted mail in the archive

[Jaap-Henk Hoepman <hoepman@cs.utwente.nl>]

On 29 Apr 2001 19:30:12 +0200 Florian Weimer <fw@deneb.enyo.de> writes:
> Andreas Fuchs <asf@acm.org> writes:
> 
> > I just saw something that shocked me. I had sent an encrypted mail to a
> > friend of mine and tried to read it in the archive. Guess what?
> > 
> > The mail that is stored in my archive group is not encrypted in any
> > way.
> 
> If this is not acceptable in your environment, you need a
> cryptographic filesystem anyway, so I don't consider this a problem.

I consider this to be a _big_ problem, because it is definitely not what I
would expect. If I send encrypted mail, the local copy should be encrypted
too. If I only send encrypted mail to a few people, a cryptograpic filesystem
is overkill. Moreover, people may store/archive their mail on some fileserver
they have no control over.

Jaap-Henk

P.S.: Andreas, what method do you use to encrypt your mail? I don't seem to 
recall seeing this behaviour using pgp and mailcrypt.

-- 
Jaap-Henk Hoepman             | Come sail your ships around me
Dept. of Computer Science     | And burn your bridges down
University of Twente          |       Nick Cave - "Ship Song"
Email: hoepman@cs.utwente.nl === WWW: www.cs.utwente.nl/~hoepman
Phone: +31 53 4893795 === Secr: +31 53 4893770 === Fax: +31 53 4894590
PGP ID: 0xF52E26DD  Fingerprint: 1AED DDEB C7F1 DBB3  0556 4732 4217 ABEF