what they didnt understand was that when they were looking at the messages or contributing to them , the data still traversed across the web from their system to the central mail server and could be captured .