Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #263675

Re: IMAP vs POP was Thunderbird vs Claws Mail

Show all headers | View raw

On 19/11/23 08:04, jeremy ardley wrote:
>
> On 19/11/23 01:59, Alex wrote:
>> IMAP clients will therefore keep messages on the IMAP server and not 
>> delete them unless you specifically tell them to, for example via 
>> right-click -> delete. 
>
>
> A client can also alter messages retained on a server or event insert 
> new messages. This is interesting in computer forensics.
>
> It means that if an email is on a server e.g. hotmail or gmail, it has 
> no probative value unless supported by other evidence such as server 
> records, digital signatures,  or corroborating evidence on other systems.
>
> In my professional cyber-forensic practice I have tested just how much 
> you can alter in an email on a server. The answer is essentially 
> everything. All headers, dates, content etc.
>
> Server records of email receipt are usually transient so after a few 
> months they can no longer be used as corroboration.
>

Incidentally, I am using gmail for this list. They have made a recent(?) 
change so that an email that is sent to the debian list automatically 
gets a 'copy' in the inbox. In fact it's just a view of the sent email.

They then drop any copy received from the list, probably based on 
matching the email ID field (?)

 From a forensic perspective, gmail only ever stores one copy of an 
email based on its email ID. The altering emails on the server trick 
involves creating a modified copy with a different ID field, deleting 
the original email and so removing its ID from gmail, then altering the 
ID of the copy to the original ID.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Thunderbird vs Claws Mail Peter Ehlert <peter@sdi-baja.com> - 2023-08-15 19:10 +0200
  Re: Thunderbird vs Claws Mail Marco <mo01@posteo.de> - 2023-08-15 19:20 +0200
  Re: Thunderbird vs Claws Mail Joe <joe@jretrading.com> - 2023-08-15 20:40 +0200
  Re: Thunderbird vs Claws Mail Bret Busby <bret@busby.net> - 2023-08-15 21:20 +0200
    Re: Thunderbird vs Claws Mail "Russell L. Harris" <russell@rlharris.org> - 2023-08-15 21:50 +0200
      Re: Thunderbird vs Claws Mail Bret Busby <bret@busby.net> - 2023-08-15 23:30 +0200
      Re: Thunderbird vs Claws Mail Frank Lanitz <frank@frank.uvena.de> - 2023-08-29 20:30 +0200
    Re: Thunderbird vs Claws Mail Peter Ehlert <peter@sdi-baja.com> - 2023-08-19 16:10 +0200
      Re: Thunderbird vs Claws Mail Bret Busby <bret@busby.net> - 2023-08-19 16:30 +0200
  Re: Thunderbird vs Claws Mail Max Nikulin <manikulin@gmail.com> - 2023-08-16 04:30 +0200
    Re: Thunderbird vs Claws Mail Peter Ehlert <peter@sdi-baja.com> - 2023-08-19 16:20 +0200
  Re: IMAP vs POP was Thunderbird vs Claws Mail Peter Ehlert <pb21a@sdi-baja.com> - 2023-11-18 18:10 +0100
    Re: IMAP vs POP was Thunderbird vs Claws Mail peter ehlert <sdibaja@gmail.com> - 2023-11-18 18:30 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail peter ehlert <sdibaja@gmail.com> - 2023-11-19 16:00 +0100
    Re: IMAP vs POP was Thunderbird vs Claws Mail Alex <alex@blueselene.com> - 2023-11-18 19:10 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail jeremy ardley <jeremy.ardley@gmail.com> - 2023-11-19 01:10 +0100
        Re: IMAP vs POP was Thunderbird vs Claws Mail jeremy ardley <jeremy.ardley@gmail.com> - 2023-11-19 02:30 +0100
    Re: IMAP vs POP was Thunderbird vs Claws Mail Joe <joe@jretrading.com> - 2023-11-18 20:30 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail Charles Curley <charlescurley@charlescurley.com> - 2023-11-18 22:30 +0100
        Re: IMAP vs POP was Thunderbird vs Claws Mail Joe <joe@jretrading.com> - 2023-11-19 13:10 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail Tim Woodall <debianuser@woodall.me.uk> - 2023-11-19 05:40 +0100
        Re: IMAP vs POP was Thunderbird vs Claws Mail David Wright <deblis@lionunicorn.co.uk> - 2023-11-19 06:50 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail Joe <joe@jretrading.com> - 2023-11-19 13:00 +0100
        Re: IMAP vs POP was Thunderbird vs Claws Mail Joe <joe@jretrading.com> - 2023-11-19 17:20 +0100
    Re: IMAP vs POP was Thunderbird vs Claws Mail Peter Ehlert <pb21a@sdi-baja.com> - 2023-11-19 17:00 +0100
      Re: IMAP vs POP was Thunderbird vs Claws Mail Tixy <tixy@yxit.co.uk> - 2023-11-19 19:00 +0100
    Re: IMAP vs POP was Thunderbird vs Claws Mail David Wright <deblis@lionunicorn.co.uk> - 2023-11-21 04:50 +0100

csiph-web