[DFSci] technical email question

[Simson Garfinkel]

Clients can display whatever they want. Some clients (e.g. Apple's MacOS client) convert the time displayed from local time of the sender to local time of the recipient. The client might display the day of week from the mail header, but it could just as easily regenerate it. Why don't you experiment?

Simson


> On Jun 3, 2016, at 7:41 AM, Gary C. Kessler <gck at garykessler.net> wrote:
> 
> Hi Jon.
> 
> Without any more data -- e.g., client s/w, OS, etc. -- it appears that the client merely copies the date and re-calculates the day; incorrectly, in this case....
> 
> /kess
> 
>> On Jun 02, 2016, at 15:03 , Jon Berryhill <jberryhill at computerforensics.com> wrote:
>> 
>> A question I’m throwing out to the group. I don’t have access to the necessary systems at the moment to test this, maybe someone knowns the answer….
>> 
>> In the full header of an email is the line “Date:” which shows the date the email was sent. This is the first date that appears in the header as read from the bottom up. Assume that field read
>> 
>> Date: Mon, 30 May 2016 15:12:01 +0000
>> 
>> When that email is read and displayed by the email client software it will populate the abbreviated header with the date in what ever formate that client is configured to show. If, for what ever reason, the email Date line read
>> 
>> Date: Tue, 30 May 2016 15:12:01 +0000
>> 
>> Would the client, if it were configured to display the day of the week, simply regurgitate what was there or does it look at it’s own calendar to see what the day of the week actually was for that date?
>> 
>> 
>> -----------------------------
>> Jon Berryhill
>> President & COO
>> Berryhill Computer Forensics, Inc.
>> P.O. Box 1674
>> Benicia, CA 94510
>> phone: 707-745-1405
>> email: jberryhill at computerforensics.com
>> www.computerforensics.com
>> 
>> _______________________________________________
>> DFSci mailing list
>> DFSci at lists.dfrws.org
>> 
>> Manage your subscription at:
>> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org
> 
> =================================================================
> Gary C. Kessler, Ph.D., CCE, CCFP, CISSP
> GARY KESSLER ASSOCIATES
> 452 Chelsea Place Ave., Ormond Beach, FL 32174
> 
> +1 802-238-8913 (mobile)                   gary.c.kessler (Skype)
> gck at garykessler.net                   http://www.garykessler.net/
> 
> Professor, Embry-Riddle Aeronautical University
> 1st V.P., Consortium of Digital Forensic Specialists (CDFS)
> Editorial Board, Journal of Digital Forensics, Security and Law
> Member, Internet Crimes Against Children Task Force
> Member, New England Electronic Crimes Task Force (ECTF)
> Adjunct Professor, Edith Cowan University, Perth, AUS
> 
> PGP Public Key: http://www.garykessler.net/pubkey.html
> 
> 
> 
> _______________________________________________
> DFSci mailing list
> DFSci at lists.dfrws.org
> 
> Manage your subscription at:
> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org