From: Jon Lasser <jlasser@rwd.goucher.edu>
Date: Sat, 9 Dec 95 13:30:08 PST
To: cypherpunks <cypherpunks@toad.com>
Subject: Re: Warning about Pegasus Mail and PGP (fwd)
In-Reply-To: <199512092108.NAA11006@jobe.shell.portal.com>
Message-ID: <Pine.SUN.3.91.951209162229.340B-100000@rwd.goucher.edu>
MIME-Version: 1.0
Content-Type: text/plain


On Sat, 9 Dec 1995 anonymous-remailer@shell.portal.com wrote:

> I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
> it doesn't sign or encrypt the message until just before
> transmitting it.  So it stores your PGP private key password
> with the message until it sends it.

Can anyone verify this?

Kinda brings new meaning to the term "Open Encryptor," huh?

Jon
------------------------------------------------------------------------------
Jon Lasser                <jlasser@rwd.goucher.edu>            (410)494-3072 
          Visit my home page at http://www.goucher.edu/~jlasser/
  You have a friend at the NSA: Big Brother is watching. Finger for PGP key.