Hello Gerard!

On Tuesday, September 3, 2002 at 9:05:13 AM you wrote:

>    Anyway, one of the problems I have with MS software is that it tags
>    all sorts of personal info to your files and now I find that TB! does
>    this to :-(

Hm, I just tested it with your message and saw that my e-mail was
added as an X-header (X-Sender). After thinking about it a few minutes
I - an outspoken privacy and security freak - find that not just quite
but completely correct.

In most cases it may not seem interesting to see that a mail to you
has been transferred wrongly to me. But wouldn't you as the receiver
of such a message want to know that the message could have been read
by me?

Go one step further, one of your business associates writes a
confidential but non-encrypted message to you, he addresses it wrongly
(accidentally) to me. I read it, find the information quite
interesting - perhaps I could use it to outbid you in a pitch - and
then re-direct it to you, so nobody will notice anything. I outbid you
and you never come to know what happened. I can think of another
scenario - concerning personal information and gossip within a company
- where it would be good to know that messages are wrongly delivered.

Perhaps the accidentally wrong address happens frequently due to a
user's mistake. wouldn't you want to know that so you can tell him?
And what about using this feature especially to run confidential
information to someone outside - a kind of Man in the Middle attack?*

BTW, the point in signing messages with PGP (or similar schemes) is to
prevent *any* meddling with messages ...


*I know, this can also be achieved by just BCCing or mass mailing etc.




-- 
Dierk Haasis
http://www.Write4U.de
http://Interest.Write4U.de/pongo

PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys

The Bat 1.61 on Windows 95 4.0 1212 C

Asking dumb questions is easier than correcting dumb mistakes.


________________________________________________
Current version is 1.61 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to