Re: Sniffing emails - how?

[xyberpix <xyberpix () xyberpix com>]

It's possible over the Net if the user has to POP mail from a box on the
Net.

xyberpix

On Sat, 2004-11-13 at 10:50 +0800, Derek Fountain wrote:
> Reading the archives of this and other lists, I occasionally come across 
> quotes like this (from the WebApp list in this case):
>
> "2/ That sending a user's password in clear text over email systems is a 
> secure method; inappropriate for most sites. For example, an attacker could 
> provoke the password recovery procedure for his colleague and sniff the email 
> containing the password with relative ease."
>
> Am I correct in thinking that this is only a real problem when an attacker has 
> access to the same network as the email recipient? Or is this kind of 
> sniffing possible across the internet in general?

Attachment: signature.asc
Description: This is a digitally signed message part