So when my relatives come visit, they usually email their itineraries so we have a record of their flights. However, the 6 digit booking reference is usually included in that itinerary. This seems like a bad idea to me. With the booking reference and the last name can't I adjust bookings and really mess with things? I wouldn't do that myself, but it does seem like a bad habit. Email is not a very secure method of communication to start with.

Any thoughts?