From: "Siberia" <klong@phoenix.net>
Date: Sat, 9 Dec 95 16:27:32 PST
To: cypherpunks@toad.com
Subject: Re: Warning about Pegasus Mail and PGP (fwd)
Message-ID: <199512100028.SAA26091@phoenix.net>
MIME-Version: 1.0
Content-Type: text/plain


Okay, here's how I understand things with PGP and Pegasus.  You have two
options with Pegasus depending on the set-up options you choose.  You can
either send upon completion of your out-going email, or you can have your mail
queued until you press the send out-going mail button.  The actual PGP process
does not occur until you actually send the mail.  So the answer would be: 
don't queue your mail.  

On  9 Dec 95 at 16:24, Jon Lasser wrote:

> On Sat, 9 Dec 1995 anonymous-remailer@shell.portal.com wrote:
> 
> > I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  
> > I found that when you sign a message and queue it, it stores your password
> > in the clear on the hard drive. Apparently
> > it doesn't sign or encrypt the message until just before
> > transmitting it.  So it stores your PGP private key password
> > with the message until it sends it.
> 
> Can anyone verify this?
> 
> Kinda brings new meaning to the term "Open Encryptor," huh?
> 
> Jon
> ------------------------------------------------------------------------------
> Jon Lasser                <jlasser@rwd.goucher.edu>            (410)494-3072 
>           Visit my home page at http://www.goucher.edu/~jlasser/
>   You have a friend at the NSA: Big Brother is watching. Finger for PGP key.
> 
> 
> 

Namaste'

Kimberly Long
klong@phoenix.net

What is life?  It is the flash of a firefly in the night.  It is the breath of a 
buffalo in the wintertime.  It is the little shadow which runs across the 
grass and loses itself in the sunset.
                                              ~Crowfoot 1821-1890         )O(