Steve,
Encryption of SUBJECT LINES: can be useful, this was discussed on the PGP/MIME
mail list. To the best of my knowledge, there was no definitive conclusion.
I'll keep track of these requests. MUA should allow user's to sort mail and
view subject lines without requiring decryption, or automating the process.
User's should be smart enough not to make subject_lines too descriptive,
however, any subject adds to traffic analysis.
cb
At 02:27 PM 7/23/97 -0700, Steve Schear wrote:
It is obvious that descriptive email Subject lines can offer a potential
security leak, aiding traffic analysis and eavesdropping. Therefore
cautious crypto emailers either leave this line blank, use a
non-descriptive header line, etc.
Might it be possible to add a feature to the PGP cyphertext body so email
plug-ins could save the Subject line in the cyphertext, blank the email
field during transit and restore its value after decryption at the
receiptient end?
--Steve