From: "Gary Jeffers" <CCGARY@MIZZOU1.missouri.edu>
Date: Sun, 20 Nov 94 13:05:02 PST
To: cypherpunks@toad.com
Subject: Making Terminal Remailers Foreign
Message-ID: <9411202104.AA21607@toad.com>
MIME-Version: 1.0
Content-Type: text/plain


THIS TEXT FOR EDUCATIONAL USE ONLY. I DO NOT ADVOCATE THE BREAKING OF
ANY LAW OR OF PROVOKING CIVIL LAW ACTIONS.

                 MAKING TERMINAL REMAILERS FOREIGN

Dear Cypherpunks,

   I have been concerned about the security of remailers & their ops &
I think I have found a scheme to give them an extra magnitude of safety.
With some little reflection, it is obvious that an indiscreet user
could compromise the safety of a remailer & its op. The reckless user
could violate local laws or could provoke civil legal actions, or could
be "politically or culturally indiscreet". My general software solution
could give a safety net to the remailer w/ op.

Firstly, I would like to provide a small glossary:

Collector remailer - The 1st remailer in a remailer chain.

Fortress remailer - A remailer that, due to technological devices, is
  safe from all political, legal, & technical attacks. An ideal - no
  such thing yet.

Hardened remailer - A remailer with security between that of a State
  Sufferance remailer & a Fortress remailer. Does not allow itself
  to be used as a domestic terminal remailer. It may have other
  political & technological safeties as well. This kind of remailer is
  the subject of this post.

Inner link remailer - An inner remailer; between the collector &
  the terminal remailers.

State sufferance remailer - A remailer that has no political or software
  safeties. Allows itself to be used as a domestic terminal remailer.

Terminal remailer - The last remailer in the chain.




   My plan concerns making the terminal remailer more secure. Obviously,
the terminal remailer takes the most heat & needs more security. The
extra security should be easily achieved by putting code into the
remailer that says:
"If mail being delivered to another remailer, then continue;
 If mail being delivered to a foreign country, then continue;
 If mail being delivered to a a domestic end user (not remailer),
 then deliver that mail to a foreign remailer & instruct it to deliver
 to end user."

   This scheme would insure that for that remailer, all mail
deliveries would be foreign. If there were legal or political problems,
then that remailer would be protected by its foreign jurisdiction.
This safety would not be bulletproof, but it would greatly raise the
cost of hassling the remailer. A cautious remailer operator might
choose a remailer in a country with really bad diplomatic relations with
his own host country.

   This scheme has the advantage that it could be easily implemented by
the concerned remailer operator without depending on cooperation by
others. It would also seem to be a fairly simple coding problem. Due to
the extra security provided to the terminal remailer, the remailer user
should also be more secure. In fact, I believe it would make the whole
chain more secure.

                                    PUSH EM BACK! PUSH EM BACK!
                                    WWWAAAYYY  BBBAAACCCCK!
                                    BBBEEEAAATTTT  STATE!
                                    Gary Jeffers