Warning about Pegasus Mail and PGP (fwd)

Forwarded message.

From: investor@flood.xnet.com (Investortools)
Newsgroups: alt.security.pgp
Subject: warning about PMail-PGP
Date: 9 Dec 1995 00:47:46 GMT
Organization: XNet - A Full Service Internet Provider - (708) 983-6064
Lines: 5
Message-ID: <4aambi$e33@flood.xnet.com>
NNTP-Posting-Host: cyclone.xnet.com
X-Newsreader: TIN [version 1.2 PL2]

I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
it doesn't sign or encrypt the message until just before
transmitting it.  So it stores your PGP private key password
with the message until it sends it.

On Sat, 9 Dec 1995 anonymous-remailer@shell.portal.com wrote:

> I just installed the "Open Encryptor" PGP interface for Pegasus  Mail.  I found that when you sign a message and queue it, it stores your password in the clear on the hard drive. Apparently
> it doesn't sign or encrypt the message until just before
> transmitting it.  So it stores your PGP private key password
> with the message until it sends it.

Can anyone verify this?

Kinda brings new meaning to the term "Open Encryptor," huh?

Jon
------------------------------------------------------------------------------
Jon Lasser                <jlasser@rwd.goucher.edu>            (410)494-3072 
          Visit my home page at http://www.goucher.edu/~jlasser/
  You have a friend at the NSA: Big Brother is watching. Finger for PGP key.