Yuku free message boards

alison wrote:

---

i am not an expert on email security, however I am not sure I've ever seen an "encrypted" email. Can you explain to me how that would work?

Well, either sent as some banks do for customer - bank communications from an SSL website and encrypting / decrypting the information on the fly, or using a public / private key set-up like PGP. That's not really the point, though - you wouldn't do that in these circumstances, and I'm not saying the email needs to be encrypted.

alison wrote:

---

And unless someone else has access to your email account, how is it insecure?

Well, my understanding is that if the email's plain text anyone with system access at any relay point between the sender and reciever can read it, if they wished, and that emails hang around on mail servers, in caches etc. for a very long time.

alison wrote:

---

If your password was not in plain text in your email, how would you read it?

Why does the password need to be in the email at all? The email was just confirmation that a help ticket had been received, and the password was appended in a footer, it wasn't a discussion about account problems or recovery; I didn't need to read it.

OK, perhaps it's not a big deal, and I'd be a lot more worried if it was a bank doing the same thing; at the same time it's not good practice, and seems unnecessary to send personal information winging around the internet when there's no reason to do so.