Hi Dierk, On Tue, 3 Sep 2002 09:45:24 +0200, you wrote: > Hm, I just tested it with your message and saw that my e-mail was > added as an X-header (X-Sender). After thinking about it a few minutes > I - an outspoken privacy and security freak - find that not just quite > but completely correct.
It may just be my server, but I think it replaces the return-path as well. > Go one step further, one of your business associates writes a > confidential but non-encrypted message to you, he addresses it wrongly > (accidentally) to me. [snip] Good example ;) > BTW, the point in signing messages with PGP (or similar schemes) is to > prevent *any* meddling with messages ... Technically incorrect I think. If you PGP sign an email, it only does the text, and none of the headers. It doesn't tell you if in any way the message was read by a middle man, or redirected, or bounced about in any way. At least that is the way the ascii armour signing works anyway. I'm not entirely sure how the other method is tagged, but I'd guess it is probably very similar. -- Jonathan Angliss ([EMAIL PROTECTED]) ________________________________________________ Current version is 1.61 | "Using TBUDL" information: http://www.silverstones.com/thebat/TBUDLInfo.html

