From: nelson@crynwr.com
Date: Fri, 7 Jun 1996 20:51:46 +0800
To: cypherpunks@toad.com
Subject: Re: Multiple Remailers at a site?
In-Reply-To: <19960604232157.2053.qmail@ns.crynwr.com>
Message-ID: <19960606195025.9398.qmail@ns.crynwr.com>
MIME-Version: 1.0
Content-Type: text/plain


Scott Brickner writes:
 > nelson@crynwr.com writes:
 > >Scott Brickner writes:
 > > > If the remailer does a good job with the delays and shuffling, then
 > > > it becomes difficult for the analyst to match message a with
 > > > message b, leaving him with what he already knew (that A and
 > > > RemailerX have a common interest, as to B and RemailerX, but the
 > > > interests may be wholly unrelated).
 > >
 > >Nope.  Not if each of them runs a remailer.  That's why mixmaster is
 > >SO WONDERFUL.
 > 
 > The "to" and "from" values that the traffic analyst will be using
 > are the IP addresses in the packets.  It doesn't matter whether
 > mixmaster, cypherpunks, or penet remailers are used, they still use
 > IP addresses.

Sure *does* matter.  There's no computationally feasible way to
associate one mixmaster message with another.  The only way you can
get a clue is by analyzing who sends mail into and out of the
mixmaster system.  If both of your endpoints are within the mixmaster
system, you have no entering or exiting mail to analyze.  It doesn't
matter if the mixmaster remailers are on the same or different systems.

-russ <nelson@crynwr.com>    http://www.crynwr.com/~nelson
Crynwr Software   | Crynwr Software sells packet driver support | PGP ok
11 Grant St.      | +1 315 268 1925 voice | It's no mistake to err on
Potsdam, NY 13676 | +1 315 268 9201 FAX   | the side of freedom.