home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!cs.utexas.edu!sdd.hp.com!spool.mu.edu!uwm.edu!rutgers!psuvax1!atlantis.psu.edu!barr
- From: barr@pop.psu.edu (David Barr)
- Newsgroups: comp.unix.admin
- Subject: Re: How to write a "turnin" utility??
- Message-ID: <l0b1Hz+mqb@atlantis.psu.edu>
- Date: 29 Dec 92 21:49:54 GMT
- References: <1hpr33INNco0@rave.larc.nasa.gov> <0291H&pdqb@atlantis.psu.edu> <Dec29.212116.55124@yuma.ACNS.ColoState.EDU>
- Sender: news@atlantis.psu.edu (Usenet)
- Organization: Penn State Population Research Institute
- Lines: 23
-
- In article <Dec29.212116.55124@yuma.ACNS.ColoState.EDU> dan@lamar.ColoState.EDU (Danilo Silva) writes:
- >In article <0291H&pdqb@atlantis.psu.edu> barr@pop.psu.edu (David Barr) writes:
- >>... stuff deleted
- >
- >> That's the first time I've ever heard someone call email "secure".
- >>Evidently our definitions of "secure" differ.
- >>
- >> A mail solution can be trivially spoofed.
- >
- >What do you mean by e-mail being trivially spoofed??
-
- Exactly that. The majority of implementations of mail on UNIX platforms
- have no authentication whatsoever. What's more it is trivially possible
- to forge mail such that it appears to come from anyone at all.
- Taking the Internet RFC-822+SMTP mail specification and transport system
- as an example, you'd need some kind of two-way public-key encryption in order
- to start calling it truely "secure".
- If you really want to learn how, just read up on RFC 822 and RFC 821.
-
- --Dave
- --
- System Administrator, Population Research Institute barr@pop.psu.edu
- Emacs is a fine operating system, but I still prefer UNIX. - Tom Christiansen
-