There is another issue with the OpenPGP standard which should have been addressed a long time ago: The "Subject:" line is not encrypted for encrypted mail. Even *if* you know about this, it is inconvenient: You always try to find a subject which is still meaningful to the addressee, but not to anyone else. However, if a user does not know about this, it is a dangerous gap in PGP's security: In many cases, one can deduce the content of the encrypted mail from the subject header. PGP and MUAs with PGP support should either make it very clear that the subject is not encrypted, or (ideally) a facility for encrypted message headers should be added to OpenPGP. Richard -- __ _ |_) /| Richard Atterer | \/¯| http://atterer.net ¯ ´` ¯
This archive was generated by hypermail 2b30 : Thu Jun 28 2001 - 15:16:15 PDT