> SSL encrypts the session between the MUA and the POP3
> (or IMAP, although the reference was to POP3 over SSL) 
> server.

So the session or transfer of data is encrypted only when it is intransit. This is 
from MUA to POP3 in the example.  It prevents sniffers from recording data that it 
readable.

> it's not so much that the email is unreadable
> as it travels from SMTP server to SMTP server.
> rather, when you check your mail, YOUR PASSWORD


> it's not about when you send email.  that doesn't
> usually require a password.  it's about when you
> check your mail.  that *DOES* require a password.

Dido also mentioned SSL in connecting to an SMTP server. So that lead me to ask if 
emails from mail server to mail server is also encrypted.  I guess it is only between 
MUA and an SSL enabled SMTP server.  After that it is the regular passing of email 
data from server to server.

> to your original question about SSL vs GPG.  they
> solve different problems.  POP3 over SSL solves the
> "sending my password in the clear" problem. only
> the connection between your computer and the
> POP3 server is protected by SSL. GPG solves the 
> "i don't want anyone between me and my
> recipient to be able to read my mail" problem.

I see so using both for an ultra secret email is the most effective way.

Thanks.

Holden
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to