|
Re: Smart People Unite
 Originally Posted by JD52
Does anyone know if the larger ISP's keep logs of emails sent and received on their pop mail accounts?
Yes, it is possible that it exists on mutiple servers. The sending and/or receiving servers. They may capture emails for this very reason and then purge them after a certain amount of time (but it's just a plausible that they don't. Especially if they aren't required to). More realistically, it was caught in the nightly backup if the email was received and remained on the host long enough to be backed up before the user POP'd in and got it.
Also, if the other person altered the email and they are using POP, then the copy that was altered is local to their PC. If they have the option enabled to leave a copy of the message on server, then that message will be in its un-edited form on the host since POP can't write back to the server (iirc)sh.
 Originally Posted by JD52
Also is there any way to authenticate an email. Any way to tell a real from an altered?
Sure, forensic investigators can compare time stamps on the related messages and logs. And if the above scenario came into play, it should be quite easy.
Good luck
|