christophe barbé on Wed, 3 Jul 2002 14:05:56 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] keysigning wednesday?


On Wed, Jul 03, 2002 at 01:45:56PM -0400, Kevin Brosius wrote:
> christophe barbé wrote:
> > 
> 
> ...
> 
> > So with DCA.net you have two solutions : Grab your mail in an insecure
> > way (at least fetch it only when your are connected to your DCA link,
> > which is not ever true with a laptop) or pay $5 per month for a shell
> > account.
> > 
> > NOTE: Secure mail is especially important with cable-modem (ie. not
> > ADSL) where you share the connexion with your neighborough and then
> > where it is easy to see all passwords.
> > 
> 
> 
> Secure ... mail?  I keep seeing this concept mentioned by different
> people, and keep wondering why this is important to them.  Are you using

First you keep your password for you. With a few dial-up provider, the
same password is used for the mail and the connexion and ...

Also you are responsible for what you do on the internet, spaming, porn
child, launching a new virus, ... If someone can use your identity, you
can have serious problem.

> this on an internal secure network?  It just seems like an exercise with
> little benefit for mail which travels over public networks.

This is very easy to setup when provided by your ISP. I don't see any
good reason to use an unsecure manner when I have a secure manner to do
it. In fetchmail for IMAPS you need to add one keyword or three if you
want to protect yourself against MITM. 

They should certainly use IMAPS by default and provide for you a special
'unsecure' keyword. Also I guess you don't have a laptop. 
Let's imagine you come to a PLUG meeting with your laptop, check your
mail. Anyone with a laptop on the same hub can have your password (and
the login, server address).

Christophe

> -- 
> Kevin Brosius
> 
> ______________________________________________________________________
> Philadelphia Linux Users Group       -      http://www.phillylinux.org
> Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
> General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug
> 

-- 
Christophe Barbé <christophe.barbe@ufies.org>
GnuPG FingerPrint: E0F6 FADF 2A5C F072 6AF8  F67A 8F45 2F1E D72C B41E

Cats are rather delicate creatures and they are subject to a good
many ailments, but I never heard of one who suffered from insomnia.
--Joseph Wood Krutch

Attachment: pgpUK7pdvdk48.pgp
Description: PGP signature