From: ichudov@algebra.com (Igor Chudov @ home)
Date: Tue, 5 Mar 1996 07:57:54 +0800
To: dlv@bwalk.dm.com (Dr. Dimitri Vulis)
Subject: Re: Mainstreaming PGP on Usenet
In-Reply-To: <kgT9JD16w165w@bwalk.dm.com>
Message-ID: <199603040500.XAA06840@manifold.algebra.com>
MIME-Version: 1.0
Content-Type: text


-----BEGIN PGP SIGNED MESSAGE-----

To: dlv@bwalk.dm.com (Dr. Dimitri Vulis)
Cc: cypherpunks@toad.com
Subject: Re: Mainstreaming PGP on Usenet

Dr. Dimitri Vulis wrote:
> Bruce Baugh <bruce@aracnet.com> writes:
> > I'm surprised nobody has brought this up before....
> >                      FIRST CALL FOR VOTES (of 2)
> >             moderated group soc.culture.russian.moderated
> >
> > <snip>
> >
> > 6. Individuals in the database of known readers may post freely to
> > the group, subject to the conditions in sections 1-4 above.  If need
> > arises, the robomoderator may perform PGP verification of the
> > identity of the known reader and, if the reader requests so,
> > automatically reject all the submissions from the reader without
> > a valid PGP signature.
> 
> Igor Chudov, who coded the robomoderator, reads Cypherpunks, and
> is known to appreciate and use good suggestions.

Indeed. If you indicate your interest, I can post here a more or less
full description of the robomoderator, how it implements secure
exchange between itself and human moderators, verifies submissions,
and signs approved articles for posting (it uses PMApp by Greg Rose).

Your criticisms will be most welcome.

> One issue that hasn't been addressed by the s.c.r.m robomod is the
> possibility of persistent nyms: that is, Alice D. Nonymous somehow makes
> her public key known to the robomod; and later if someone submits an article
> via some anon remailer claiming to be hers, it would be rejected if the
> signature doesn't check. Of course, her true submissions would be accepted
> from any remailer. How could such protocol be implemented?

We see no problem with user posting under pseudonyms, as long as they do
not try to pretend to be other real people and do not constantly mutate,
and submit their messages to the robomoderator for consideration.

> (Of course, some people have what they believe to be valid reasons not
> to use PGP.)

Sorry if this question will provoke a mini flamewar, but what are
such reasons?

	- Igor.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMTp458JFmFyXKPzRAQEbQAP8CAtCiNm9h7pijz4+qrm6FFGRBDjsqvZb
RkgFetA01oEONdp+RW3NP6GBY1zeNg7+HahfoavNPhASwBl230hLni1fEW5pL75o
J5v5yNCYT4/N1aVfchoo50kjXv+KqvRyjr5YNxVmd/IFKokSV1w9ASfdXVk/7uDB
Ep1n1jmP4OQ=
=EQOd
-----END PGP SIGNATURE-----