-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi
On Monday 31 December 2018 at 9:06:39 PM, in <mid:6a39fc9c-3105-451b-bb5e-6d6757337...@colmena.biz>, justina colmena via Gnupg-users wrote:- > Shouldn't an email message (for example) be encrypted > separately to > each BCC recipient, My opinion is that should be the case. However, most MUAs I've used include the BCC recipients' keys in the encryption along with the To and CC recipients' keys, so any email addresses in the user-IDs of these keys are visible to all recipients. As an exception, one MAU I used with an OpenPGP add-on would instead send an individual copy of the message to each BCC recipient, encrypted only to their key. > or is this an intended all-in-one > multiple-recipient encryption which cannot conceal > from the > cryptanalyst the fact that the same message, > encrypted only once, is > being sent to more than one receiving party? With hidden-recipient or hidden-encrypt-to or throw-keyids, it is clear how many keys were encrypted to, but the key IDs and user-IDs are not present. - -- Best regards MFPA <mailto:2017-r3sgs86x8e-lists-gro...@riseup.net> Never trust a dog with orange eyebrows -----BEGIN PGP SIGNATURE----- iNUEARYKAH0WIQSWDIYo1ZL/jN6LsL/g4t7h1sju+gUCXCwQUV8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0OTYw Qzg2MjhENTkyRkY4Q0RFOEJCMEJGRTBFMkRFRTFENkM4RUVGQQAKCRDg4t7h1sju +l+qAP4u2Ik4+zBMKk5dQuE/6ZgvBFnBjeqKt79FEQufn92LiAEArbSWuqUsRdiK zD88bQo1AwfqVzSLZ315pCVR+Rg/MASJApMEAQEKAH0WIQRSX6konxd5jbM7JygT DfUWES/A/wUCXCwQUV8UgAAAAAAuAChpc3N1ZXItZnByQG5vdGF0aW9ucy5vcGVu cGdwLmZpZnRoaG9yc2VtYW4ubmV0NTI1RkE5Mjg5RjE3Nzk4REIzM0IyNzI4MTMw REY1MTYxMTJGQzBGRgAKCRATDfUWES/A/6f/D/0eScxxhozcB1TPwVDESl1ZdG4y Ai6e8dmZyh9jVpEmTbiolXTw4IjWkuq26KMGyIdZEn2vSZtHwGm6AkMIWncR8D0A P4rQWw+6Z9evsRLKkW3+J1TyQNQfA6YZ+gxTK6BLoyVqbp520CTNyfibq9PNN+mg HqlxboA61ti2oMzQ0YhIq6H+RKbo7AhfpgQsN/NmVLa1tqbja1gQxbdmXV1axdmQ EHn0VUKTaCYSiC9ulDAnoBVgg6h4zbxxawwa6NJQ03T5YBRzu3aLmlcpHaOj7DKZ 9LM3JTY+HlPWoAwLQhuLVKmDrt60GFobn3SDhgDlrwu1WVT+98jlCr3J+5BJlyOs bAA8vCYpS6gEGtHa00JAd3qnnBfdGvxzs1wa88eHRqHkG6HWUj1qfxE5OCpGqcpy Av4rfyANiRYAGnPb3+48kMCvLEGLyHTWyewrRc4tGbyxIIjjhH/N41Uz8FbjNCuT /baoXoOzHoyzH+O78N8mn+IPyaN5sEwezUFeBZARYS6El9LU5+UsxGM4bW8wKwe+ f4GcKMGFFffQ0BEO5rIZPMwnP0X1HEVLnyOCmS+idUUCdBZ12OyEjApD1EH0B24Y qTwxNAbT6538DhAYFzHi8EJHxUOsQBLMtYKuzTpqZnpBxK6rYDXqdhc17zXylu5U a+4py/6A/kfU7UlBEA== =tUMh -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users