Re: Log files and encrypted mail

2006-10-23 Thread Mica Mijatovic 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 23 Oct 2006,
   @  @  at 18:24:29 +0500, when Richard H. Stoddard wrote:

 I turned off pop logging. Out of curiosity I opened the file in
 notepad, and was shocked to see that it included the text, etc., of
 all of my messages. Needless to say, I immediately deleted the log
 files for all of my accounts.

This is what exists as a standard behavior of this sort of logging,
and is nothing...illegal, or an omission in the design.

In the quite same fashion, _all_ your messages, that are not encrypted,
are entirely and very easily readable to practically, and literally,
entire Inter Net / world, in the process of the transport and otherwise.

This is the reason why encrypted mail is used, for instance, thus being
some sort of envelope, so nobody else can read it save the recipient(s).

Besides, fragments, or entire letters, also can be found as the parts of
OS's swap file (in XP the Pagefile.sys) and can be read very easily, as
an ordinary plain text, just by opening it in some a bit more advanced
text editor, when the OS is not active (from an other OS, for instance,
installed on another partition, disk, bootable diskette, CD...).

Therefore, all the mail by default is treated as written on post
cards, being thus open and readable to everyone.

The mail you don't want to be exposed this way, you should (keep)
encrypt(ed).

- --
Mica
 ~~~ For personal mail please use my address as it is *exactly* given
 in my From field, otherwise it will not reach me. ~~~
GPG keys/docs/software at: http://blueness.port5.com/pgpkeys/
   http://tronogi.tripod.com/pgp/pgpkeys/
[Earth LOG: 670 day(s) since v3.0 unleashing]
OSs: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium
 Windows XP(ee) Micro Lite Professional 1.6, Gentoo  Vector ~ Wine
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6-svn-4298 o tiger192 (Cygwin/MinGW32)

iQEVAwUBRTzdl7SpHvHEUtv8AQhNVAf/SpE0cFyT7PSj/GpwqoildQDl2HIzAxVY
o5K5SfOkavoqrfk76fsWypjSyaAv5O739mL1BUKRpW4jy9RnGSgOBQcaOg+SwQ1X
6Gs5iuFU6VMA7jTy5mDNC4m5eafuaecuylqhmkj/3CgaJcYHCKBPv/2eCHMJlrT8
1oRbh2bK0f9q+YY0mRAdhNBoaQm9k5kqlLujYQKIN4Kq74mjwuyXcPO+SJ1wErpx
e/2vNs8YWnr4unNP6NaWuDFuvBe5+KNspdadMKVDEkVOe9u8WYyxeGVO7VMF5pHu
A+r43n2uSXAzL3QxtNS7Zf6QqFrG102xOkZajXNKtx6/kIyNLbJjUg==
=gb3U
-END PGP SIGNATURE-



Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: Log files and encrypted mail

2006-10-23 Thread Richard H. Stoddard 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Mica,

Monday, October 23, 2006, 8:19:52 PM, you wrote:

MM This is what exists as a standard behavior of this sort of
MM logging, and is nothing...illegal, or an omission in the
MM design.

I understand it's not illegal or a flaw; I guess I was just surprised
that much detail was preserved in them. Not their fault, just my
ignorance.

MM In the quite same fashion, _all_ your messages, that are not
MM encrypted, are entirely and very easily readable to practically,
MM and literally, entire Inter Net / world, in the process of the
MM transport and otherwise.

That I clearly know.

MM The mail you don't want to be exposed this way, you should (keep)
MM encrypt(ed).

Unfortunately, none of my family or friends use pgp/gpg. They've long
since ceased asking about the headers and footers on signed messages.
If the process becomes easier, maybe then they will, but they don't
see the point of paying for PGP and so GnuPG is more than they are
willing to deal with.

In the meantime, I will at least not keep log files lying around in
the open like that.

- -- 
Rick


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32) - GPGshell v3.52
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=B5Vv
-END PGP SIGNATURE-




Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html