From: pmetzger@shearson.com (Perry E. Metzger)
Date: Mon, 25 Jan 93 14:17:36 PST
To: honey@put-in-bay.citi.umich.edu
Subject: This list...
In-Reply-To: <9301252040.AA26396@uu5.psi.com>
Message-ID: <9301252142.AA12706@maggie.shearson.com>
MIME-Version: 1.0
Content-Type: text/plain


>From: peter honeyman <honey@put-in-bay.citi.umich.edu>

>> The whole point of this list is to develop techniques to ensure privacy --
>> most of us understand that there isn't much right now.

>but but but ... sendmail already offers an easy way to hide the membership
>of a mailing list.  why not use it?

Prehaps that would be of value, but its best not to think of it as
worth too much. After all, the bad guys can likely just subscribe to
the list, and they could always just eavesdrop on the outgoing mail.
Fixing this "hole" is o.k. so long as no one believes that it has
actually added to security in any substantial way. Its best that no
false sense of security be engendered. Everyone should know and
understand that the structures as they exist are almost completely
insecure.

Perry