Interception Modernisation Programme

Chris Edwards ukcrypto at chiark.greenend.org.uk
Thu, 9 Oct 2008 14:23:34 +0100 (BST)


On Wed, 8 Oct 2008, Richard Clayton wrote:

| if your webmail system allowed a snooper to determine which account was
| logged in to, then the pattern would show up in the traffic analysis...

Virtually all webmail traffic is HTTPS - hence a snooper (presumably!) 
cannot determine which account is being accessed, nor who is being emailed.

So if a nest of mice all get hotmail/yahoo/google email accounts, they 
would seem to be in a strong position.

The only way to get the info above is to ask hotmail etc.


|
| Dissing IMP as useless isn't productive, since it will have some uses. 
|

Agreed.