[DFSci] technical email question

Gary C. Kessler gck at garykessler.net
Fri Jun 3 04:41:13 PDT 2016

Hi Jon.

Without any more data -- e.g., client s/w, OS, etc. -- it appears that the client merely copies the date and re-calculates the day; incorrectly, in this case....


> On Jun 02, 2016, at 15:03 , Jon Berryhill <jberryhill at computerforensics.com> wrote:
> A question I’m throwing out to the group. I don’t have access to the necessary systems at the moment to test this, maybe someone knowns the answer….
> In the full header of an email is the line “Date:” which shows the date the email was sent. This is the first date that appears in the header as read from the bottom up. Assume that field read
> Date: Mon, 30 May 2016 15:12:01 +0000
> When that email is read and displayed by the email client software it will populate the abbreviated header with the date in what ever formate that client is configured to show. If, for what ever reason, the email Date line read
> Date: Tue, 30 May 2016 15:12:01 +0000
> Would the client, if it were configured to display the day of the week, simply regurgitate what was there or does it look at it’s own calendar to see what the day of the week actually was for that date?
> -----------------------------
> Jon Berryhill
> President & COO
> Berryhill Computer Forensics, Inc.
> P.O. Box 1674
> Benicia, CA 94510
> phone: 707-745-1405
> email: jberryhill at computerforensics.com
> www.computerforensics.com
> _______________________________________________
> DFSci mailing list
> DFSci at lists.dfrws.org
> Manage your subscription at:
> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org

Gary C. Kessler, Ph.D., CCE, CCFP, CISSP
452 Chelsea Place Ave., Ormond Beach, FL 32174

+1 802-238-8913 (mobile)                   gary.c.kessler (Skype)
gck at garykessler.net                   http://www.garykessler.net/

Professor, Embry-Riddle Aeronautical University
1st V.P., Consortium of Digital Forensic Specialists (CDFS)
Editorial Board, Journal of Digital Forensics, Security and Law
Member, Internet Crimes Against Children Task Force
Member, New England Electronic Crimes Task Force (ECTF)
Adjunct Professor, Edith Cowan University, Perth, AUS

PGP Public Key: http://www.garykessler.net/pubkey.html

More information about the DFSci mailing list