Thought that the 2 following bugs using TB! and PGP might be of interest -
both will allow you to send an unencrypted message when you think that you
are safe.

1 - forwarding HTML emails with PGP encryption in insecure

2 - The field %ENCRYPTCOMPLETE/ the Privacy -> Encrypt when completed
    option is lost when you save a message as draft.

cheers,
davidp.
-- 
David Pascoe, [EMAIL PROTECTED], South Perth, Western Australia

Bug description has been sent to developers, included here for your info.
-----------------------------------------------------------------------------

Hello The Bat! developers,

  I'm using The Bat! Version 1.51
  Serial Number 5785E114
  under Windows 98 4.10 Build 1998  
  and would like to report a bug

  The bug description:
    forwarding HTML emails with PGP encryption in insecure

    If you forward a HTML email, TB! will encrypt the `text' part of the
    message, but will also attach a file - message.shtml - and this will
    not be encrypted - so you may think that your email is secure, but
    alas you have just forwarded an unencrypted copy of your message.

  Steps to reproduce the bug:
    generate a HTML email, say using outlook express, send it to your TB!
    mailbox. Forward it, and set Privacy->Encrypt when completed. When it
    gets forwarded, take a look and see that the main text is pgp'd but
    message.shtml has been attached unencrypted.

Regards,
  David Pascoe
-----------------------------------------------------------------------------

Hello The Bat! developers,

  I'm using The Bat! Version 1.51
  Serial Number 5785E114
  under Windows 98 4.10 Build 1998  
  and would like to report a bug

  The bug description:
    The field %ENCRYPTCOMPLETE/ the Privacy -> Encrypt when completed
    option is lost when you save a message as draft.

  Steps to reproduce the bug:
    Either use a template, or set Privacy -> Encrypted when completed when
    creating a new message. First time hit the save as draft hourglass
    icon to postpone creation of the message. Now when you go back to
    complete the message and either send direct or put into the outbox,
    the message will not be pgp encrypted.

    Now, create a new message again, selecting encrypt when complete. This
    time put into the outbox. Go back, it will be encrypted, and you could
    if you wanted decrypt and keep composing.

    So the bug will result in people mistakenly sending unencrypted email
    if they used the draft feature.

Regards,
  David Pascoe
-----------------------------------------------------------------------------

-- 
______________________________________________________
Archives   : <http://tbudl.thebat.dutaint.com>
Moderators : <mailto:[EMAIL PROTECTED]>
TBTech List: <mailto:[EMAIL PROTECTED]>
Unsubscribe: <mailto:[EMAIL PROTECTED]>

You are subscribed as : [email protected]


Reply via email to