Just stumbled over a major issue regarding yahoo mail accounts: They don’t support GPG encryption and signing of emails – instead such emails are rejected, which keeps the owner of a Yahoo account off the boundaries of other users that use some basic security.
Just had some problem with my Dad the other day. Daddy got stuck with his new computer and I tried to help him via telephone.
Sa far so good.
In order to make it easier for him to send me a remote-certificate I sent him a mail, just hoping a simple ‘reply’ would make it easier.
He went into his yahoo account and stated that he didn’t have any new mail. Especially not my mail.
‘Strange’, I thought.
I sent another mail from another account and then it worked – but I dod not think of that at the very moment.
To make a long story short: finally I ended up having set up an email account at yahoo.
Today I sent a file to my new account in order to see what is happening when you download attachments from the web-interface – so I could send files to him…
The messages bounced.
All of them.
I used another acccount … it didn’t work!
I used another acccount … it worked!
What the heck is going on???
Soon I found out. some of my accounts are automagically GPG-signed. The account that ‘worked’ didn’t have GPG-signature.
Further testing showed that GPG-Encryption also will lead to rejection.
If anyone who does a service like this does not allow users to
care for their privacy it’s useless. And the question is WHY the operators do not wish any kind of secure communication.
And it offends us all, because we are forced to abandon our privacy.
It is ridiculous that a pro account ($20,– per year) has the required options to configure the stuff in order to make it work.
Conclusion: Privacy will be for the rich!
hit any key 2 continue
-m*sh- [sarkasmus inside]
Don’t support Yahoo! It’s crap!
Posted: 16th March 2012 by mash in it-commentTags: bad, GPG, PGP, reject, Yahoo
Just stumbled over a major issue regarding yahoo mail accounts: They don’t support GPG encryption and signing of emails – instead such emails are rejected, which keeps the owner of a Yahoo account off the boundaries of other users that use some basic security.
Just had some problem with my Dad the other day. Daddy got stuck with his new computer and I tried to help him via telephone.
Sa far so good.
In order to make it easier for him to send me a remote-certificate I sent him a mail, just hoping a simple ‘reply’ would make it easier.
He went into his yahoo account and stated that he didn’t have any new mail. Especially not my mail.
‘Strange’, I thought.
I sent another mail from another account and then it worked – but I dod not think of that at the very moment.
To make a long story short: finally I ended up having set up an email account at yahoo.
Today I sent a file to my new account in order to see what is happening when you download attachments from the web-interface – so I could send files to him…
The messages bounced.
All of them.
I used another acccount … it didn’t work!
I used another acccount … it worked!
What the heck is going on???
Soon I found out. some of my accounts are automagically GPG-signed. The account that ‘worked’ didn’t have GPG-signature.
Further testing showed that GPG-Encryption also will lead to rejection.
If anyone who does a service like this does not allow users to
care for their privacy it’s useless. And the question is WHY the operators do not wish any kind of secure communication.
And it offends us all, because we are forced to abandon our privacy.
It is ridiculous that a pro account ($20,– per year) has the required options to configure the stuff in order to make it work.
Conclusion: Privacy will be for the rich!
hit any key 2 continue
-m*sh- [sarkasmus inside]