filenames of encrypted attachments visible ? How hard would it be to hide?

[Thomas Spuhler]

Your message is signed but no public key is available from the public
keyservers

Tom

On Tue, 2004-01-06 at 00:20, Ivan Boldyrev wrote:
> On 8614 day of my life Adrian von Bidder wrote:
> > And the encrypted part is again a full MIME message, with
> > attachments and all.  So the only relevant bits that go over the
> > wire unencrypted are From/To (unavoidable to the extent of the email
> > addresses) and the Subject (I have a proposal that could address
> > this cooking slowly, I think I posted it in some places a few months
> > ago).
> 
> Have you ever recieved spam with fake From and To headers?  There are
> headers and there is envelope in message, and latter is not visible to
> user.  So, you can user fake address in headers (or do not use headers
> at all) and real addresses in envelope (and envelope is visible only
> to transport agents, not delivery agents).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : /pipermail/attachments/20040108/10e7489a/attachment.bin