summaryrefslogtreecommitdiffstats
path: root/wiki/src/security/IP_address_leak_with_icedove.de.po
blob: 42650528a581196d4d72fc16b117eb94b3fcd796 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2011-01-07 10:08-0800\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: ENCODING\n"
"Language: \n"

#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Mon Dec 7 11:20:24 2009\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Icedove (Thunderbird) leaks the real IP address\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!tag security/fixed]]\n"
msgstr ""

#. type: Plain text
msgid ""
"The Torbutton extension installed in amnesia being incompatible with Icedove "
"(Thunderbird), the real IP address of the computer is disclosed to the SMTP "
"relay that is used to send e-mail."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Impact"
msgstr ""

#. type: Plain text
msgid ""
"When using Icedove to send e-mail, the computer's real IP address is "
"disclosed to the SMTP relay, that usually writes it down to a `Received:` "
"header inside outgoing e-mail. This private information is therefore "
"disclosed to:"
msgstr ""

#. type: Bullet: '* '
msgid "the SMTP relay's administrators;"
msgstr ""

#. type: Bullet: '* '
msgid ""
"anyone who is able to read such a sent e-mail, including: anyone the e-mail "
"is sent to, various network and e-mail servers administrators."
msgstr ""

#. type: Plain text
msgid ""
"When using a NAT-ed Internet connection, the disclosed IP is a local network "
"one (e.g. 192.168.1.42), which usually does not reveal too much. On the "
"other hand, when connecting directly to the Internet, e.g. using a PPP or "
"DSL modem and no router, the disclosed IP truly reveals the location of the "
"amnesia user."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Solution"
msgstr ""

#. type: Plain text
msgid ""
"Upgrade to [[amnesia 0.4.1|news/version_0.4.1]], that ships with Claws Mail "
"instead of Icedove, **and** set the following preferences in `~/.claws-mail/"
"accountrc` for every account:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"        set_domain=1\n"
"        domain=localhost\n"
msgstr ""

#. type: Plain text
msgid "See [[todo/applications_audit/claws_mail]] for details."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Mitigation"
msgstr ""

#. type: Plain text
msgid ""
"Best is to avoid using Icedove (Thunderbird) in amnesia until fixed images "
"are released. If not possible:"
msgstr ""

#. type: Bullet: '* '
msgid ""
"Use amnesia behind a NAT-ed Internet connection, inside a LAN that uses "
"widespread IP addresses."
msgstr ""

#. type: Bullet: '* '
msgid ""
"Use a trustworthy, privacy-friendly SMTP relay that does not write down the "
"client's IP address anywhere, especially in e-mail headers."
msgstr ""

#. type: Plain text
msgid ""
"Note that using GnuPG does not fix this problem at all: GnuPG only encrypts "
"the e-mail body, the e-mail headers being always kept in clear."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Affected versions"
msgstr ""

#. type: Plain text
msgid ""
"Any amnesia release until, and including, 0.3.  amnesia 0.4 is not affected."
msgstr ""