From: lutz@as-node.jena.thur.de (Lutz Donnerhacke)
Date: Mon, 2 Sep 1996 17:44:39 +0800
To: stewarts@ix.netcom.com
Subject: Re: Pseudonym server: Jenaer Anonymous Service
In-Reply-To: <199609011109.NAA14105@jengate.thur.de>
Message-ID: <m0uxKDP-0003lFC@as-node.jena.thur.de>
MIME-Version: 1.0
Content-Type: text


* stewarts@ix.netcom.com wrote:
> Jenaer Anonymous Service <anon@as-node.jena.thur.de> 
> looks like a high-security pseudonym server.  

Thanks.

> rather than having it arrive directly.  But in return,
> it's pretty secure, since you can only get caught if the
> remailer or its operator are compromised when you request a delivery.

It's strongly recomment to use a reply server to forward your requests to.
The server sends all outgoing messages via mixmaster chains.
(mixmaster@as-node.jena.thur.de can is always the first one in the chain).

The policy of this remailer urges the user to send incoming jobs only via
mixmaster chains. It may be changed to drop incoming jobs which does not
come from the local mixmaster silently.

> I haven't yet checked if how flexible it is about the location
> of Reply-To: in the headers, since some mailers make it difficult
> to paste that in.  

Reply-To: is neccessary to be included in the encrypted message body. All
readable header informations execpt Subject: {help,send} is drop to
/dev/null including the To:, From:, Sender:, Path:, Reply-To: ... lines.

> The public key for the server is signed by Lutz.Donnerhacke@Jena.Thur.De,
> which is in turn signed by  0x3B7F286D, which MIT thinks is an unknown
> signator...


0x3B7F286D is the key of Winfried Mueller, the maintainer and autor of
Religio, an information system anout religious subjects. A lot of
documents fight against Scientology. Try http://Www.thur.de/religio/.

Type Bits/KeyID    Date       User ID
pub  2048/39F37F5D 1996/04/25 Lutz Donnerhacke <Lutz.Donnerhacke@Jena.Thur.De>
                              Lutz Donnerhacke <lutz@dana.de>

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3i
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=LDb+
-----END PGP PUBLIC KEY BLOCK-----

> Because you don't get your reply email until you ask to pick it up,
> it does seem easy to abuse; complaints, flames, and mailbombs won't reach you
> if you don't ask for them.  I hope the operator doesn't mind the workload
> of managing the remailer - it looks like a good service, and with
> Julf's remailer shut down, we need more nymservers.

Sure. My nymserver is completely written as a bash script.

-- 
|   Lutz Donnerhacke   +49/3641/380259 voice, -60 ISDN, -61 V.34 und Fax    |