1997-12-01 - Re: Pasting in From:

Header Data

From: Lance Cottrell <loki@infonex.com>
To: remailer-operators@anon.lcs.mit.edu
Message Hash: 6c56ce25c91687a1d8ff16634259b2fb52d699b06e7afe8c469caedcd220a904
Message ID: <v03102802b0a801cade82@[206.170.115.5]>
Reply To: <35071a4de8a2c6f6cf77914c7747760d@anonymous.poster>
UTC Datetime: 1997-12-01 06:04:13 UTC
Raw Date: Sun, 30 Nov 1997 22:04:13 -0800 (PST)

Raw message

From: Lance Cottrell <loki@infonex.com>
Date: Sun, 30 Nov 1997 22:04:13 -0800 (PST)
To: remailer-operators@anon.lcs.mit.edu
Subject: Re: Pasting in From:
In-Reply-To: <35071a4de8a2c6f6cf77914c7747760d@anonymous.poster>
Message-ID: <v03102802b0a801cade82@[206.170.115.5]>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

The risks of allowing pasted From: lines far outweigh the benefits. Pasting
of From lines makes remailer operators much more vulnerable to charges of
fostering forgery rather than simple anonymity.

Spam baiting is another obvious risk. Forged postings with deplorable
content will bring down retribution on the forgery victim. Forged From
lines can also be used to subscribe victims to thousands of mailing lists.

The uses of this "feature" can be duplicated with other mechanisms such as
nym-servers, which provide persistent unique From lines without the
possibility of forgery of arbitrary addresses. Users desiring greater
security can simply point the reply capability of the nym server at the
nearest /dev/null.


	-Lance



- ----------------------------------------------------------
Lance Cottrell   loki@infonex.com
PGP 2.6 key available by finger or server.
http://www.infonex.com/~loki/

"Love is a snowmobile racing across the tundra.  Suddenly
it flips over, pinning you underneath.  At night the ice
weasels come."
                        --Nietzsche
- ----------------------------------------------------------


-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBNIJTRcogYxMMzklZAQHNTAf9G1n+k2BabVQipsr0bcF38Hus2TqFLig8
qCHBVrzaMxEmh9bGrEveMoF+x63kmejsNL2tiNU1HkQgs7M6nYWlYvNF2JUziMmS
2hZLMK7G67xyGHZH2Xl+f5dinNXE33vvs051kUSo1AH8Ryh4hYjvblup7uGGyBzC
YvToZa8B31GZOIGpzkUQo97RP7+BjVelnaatUmosn+52BmCMV3saDkdf1aTit/jP
+gZZGgtM+jUwG9s1+zYebv4uK3vbNL46Xd353AnYDElXXkvX2sDA3OyomYYqZ65X
ramu5RS0JXzNCB3OC68Z4AJpFc2SE6pTQDgUp0A9nMmf4ltV4JVTnA==
=4HIu
-----END PGP SIGNATURE-----






Thread