IP_address_leak_with_icedove.de.po 3.35 KB
Newer Older
1 2 3 4 5 6 7 8 9
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
amnesia's avatar
amnesia committed
10
"POT-Creation-Date: 2011-01-05 09:48-0800\n"
11 12 13 14
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
15 16
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: ENCODING\n"
amnesia's avatar
amnesia committed
17
"Language: \n"
18 19 20 21 22 23 24 25 26 27 28 29 30

#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Mon Dec 7 11:20:24 2009\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Icedove (Thunderbird) leaks the real IP address\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
31
msgid "[[!tag security/fixed]]\n"
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78
msgstr ""

#. type: Plain text
msgid ""
"The Torbutton extension installed in amnesia being incompatible with Icedove "
"(Thunderbird), the real IP address of the computer is disclosed to the SMTP "
"relay that is used to send e-mail."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Impact"
msgstr ""

#. type: Plain text
msgid ""
"When using Icedove to send e-mail, the computer's real IP address is "
"disclosed to the SMTP relay, that usually writes it down to a `Received:` "
"header inside outgoing e-mail. This private information is therefore "
"disclosed to:"
msgstr ""

#. type: Bullet: '* '
msgid "the SMTP relay's administrators;"
msgstr ""

#. type: Bullet: '* '
msgid ""
"anyone who is able to read such a sent e-mail, including: anyone the e-mail "
"is sent to, various network and e-mail servers administrators."
msgstr ""

#. type: Plain text
msgid ""
"When using a NAT-ed Internet connection, the disclosed IP is a local network "
"one (e.g. 192.168.1.42), which usually does not reveal too much. On the "
"other hand, when connecting directly to the Internet, e.g. using a PPP or "
"DSL modem and no router, the disclosed IP truly reveals the location of the "
"amnesia user."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Solution"
msgstr ""

#. type: Plain text
79
msgid ""
80 81 82
"Upgrade to [[amnesia 0.4.1|news/version_0.4.1]], that ships with Claws Mail "
"instead of Icedove, **and** set the following preferences in `~/.claws-mail/"
"accountrc` for every account:"
83 84 85 86 87 88 89 90 91 92 93
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"        set_domain=1\n"
"        domain=localhost\n"
msgstr ""

#. type: Plain text
msgid "See [[todo/applications_audit/claws_mail]] for details."
94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130
msgstr ""

#. type: Title #
#, no-wrap
msgid "Mitigation"
msgstr ""

#. type: Plain text
msgid ""
"Best is to avoid using Icedove (Thunderbird) in amnesia until fixed images "
"are released. If not possible:"
msgstr ""

#. type: Bullet: '* '
msgid ""
"Use amnesia behind a NAT-ed Internet connection, inside a LAN that uses "
"widespread IP addresses."
msgstr ""

#. type: Bullet: '* '
msgid ""
"Use a trustworthy, privacy-friendly SMTP relay that does not write down the "
"client's IP address anywhere, especially in e-mail headers."
msgstr ""

#. type: Plain text
msgid ""
"Note that using GnuPG does not fix this problem at all: GnuPG only encrypts "
"the e-mail body, the e-mail headers being always kept in clear."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Affected versions"
msgstr ""

#. type: Plain text
131 132
msgid ""
"Any amnesia release until, and including, 0.3.  amnesia 0.4 is not affected."
133
msgstr ""