Hi:
I've recently installed PGP 6.0.2i under Windows 95, available from
http://www.pgpi.com -- this comes with a plugin for Eudora, which is my
email client of choice. I was previously using PGP 5.5.3i, which also
had a Eudora plugin, which I was quite happy with.
The new plugin, though, appears to have a few "features" which are not
visible in the earlier one. To wit:
1. All encrypted or clearsigned messages go out as _attachments_, and
not as message bodies. This leads to a profusion of files with the
extension .MSG in the \WINDOWS\TEMP directory. The plugin apparently
does not delete these files after sending.
2. If you choose to encrypt a message, the resulting encrypted
attachment _includes the .sig_. In the earlier version of the plugin,
which came with PGP 5.5.3i, thsi was not the case.
Both of the above appear to decrease security, especially the second,
which would result in known plaintext in each encrypted message you
send. Or am I missing something here ?
Is there anybody who can throw some light on this ?
Udhay
--
_________________________________________________________________
http://www.unimedia.net/ http://pobox.com/~udhay
finger [EMAIL PROTECTED] for PGP public key
