> 1) Because the vast majority of users are completely ignorant of security > issues, or simply don't care.
It's true, I worked for a company that made an email client, which shipped with a service, the client is for portable use (like hotmail) but not web based. The program runs off the floppy, requires a passphrase, and stores all user information in DES encrypted files on the floppy. It tries not to let anything get swapped or written to the host computer. The trouble was finding a market for it. They're still looking. Nobody knows, nobody cares. Perhaps someone should expose the truth of the general lack of email security to the media, and let them scare everybody! GBY

