From: anonymous-remailer@shell.portal.com
Date: Sat, 9 Dec 95 13:08:42 PST
To: cypherpunks@toad.com
Subject: Warning about Pegasus Mail and PGP (fwd)
Message-ID: <199512092108.NAA11006@jobe.shell.portal.com>
MIME-Version: 1.0
Content-Type: text/plain


Forwarded message.

From: investor@flood.xnet.com (Investortools)
Newsgroups: alt.security.pgp
Subject: warning about PMail-PGP
Date: 9 Dec 1995 00:47:46 GMT
Organization: XNet - A Full Service Internet Provider - (708) 983-6064
Lines: 5
Message-ID: <4aambi$e33@flood.xnet.com>
NNTP-Posting-Host: cyclone.xnet.com
X-Newsreader: TIN [version 1.2 PL2]

I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
it doesn't sign or encrypt the message until just before
transmitting it.  So it stores your PGP private key password
with the message until it sends it.