1997-12-01 - Re: Pasting in From:

Header Data

From: “Robert A. Costner” <pooh@efga.org>
To: remailer-operators@anon.lcs.mit.edu
Message Hash: e73a570bb0fd12f84efa9eeb4148ea052e8e0e372d025ca38732d625e7cd58c5
Message ID: <3.0.3.32.19971201001413.03a6d40c@mail.atl.bellsouth.net>
Reply To: <Pine.LNX.3.94.971130135656.6085F-100000@neptune.chem.uga.edu>
UTC Datetime: 1997-12-01 05:26:41 UTC
Raw Date: Mon, 1 Dec 1997 13:26:41 +0800

Raw message

From: "Robert A. Costner" <pooh@efga.org>
Date: Mon, 1 Dec 1997 13:26:41 +0800
To: remailer-operators@anon.lcs.mit.edu
Subject: Re: Pasting in From:
In-Reply-To: <Pine.LNX.3.94.971130135656.6085F-100000@neptune.chem.uga.edu>
Message-ID: <3.0.3.32.19971201001413.03a6d40c@mail.atl.bellsouth.net>
MIME-Version: 1.0
Content-Type: text/plain



It seems to me that the purpose of a remailer is to strip the headers,
including the FROM header, not to put in fake headers.  Until someone can
explain it to me, I'd consider the idea of adding a FROM header to
anonymous mail to be asinine.

Best I can tell, the only reasonable good purpose for this is to create a
persistent nym identity without a reply to capability.  Well, remailer
software cannot support everything I suppose. (Even if Cracker may
apparently support this)

I would think the best way to put in a persistent nym capability would be
to database the PGP key id's along with the persistent identity.  Then the
remailer could produce lines like

	From: "Monty Cantsin" <anon@anon.efga.org>

Persistent identities would be created by sending a signed PGP message that
includes both the PGP public key and the persistent identity.  Since the
identity server would not database email addresses, only PGP key id's, and
only work for signed messages, there should be no problem with people
worrying about the remailer being compromised.  This also keeps someone
from stealing another's reputation capital.


  -- Robert Costner                  Phone: (770) 512-8746
     Electronic Frontiers Georgia    mailto:pooh@efga.org  
     http://www.efga.org/            run PGP 5.0 for my public key






Thread