From: stewarts@ix.netcom.com
Date: Tue, 2 Dec 1997 06:50:05 +0800
To: Amad3us <remailer-operators@anon.lcs.mit.edu
Subject: Re: Pasting in From:
In-Reply-To: <199712011450.PAA27128@basement.replay.com>
Message-ID: <3.0.3.32.19971201125046.006d2f34@popd.ix.netcom.com>
MIME-Version: 1.0
Content-Type: text/plain



At 03:50 PM 12/01/1997 +0100, Amad3us <cypherpunks@cyberpass.net> wrote:
>Then it has to allow you to put headers back in otherwise you can't
>interoperate with software.  Eg pasting in References:, Subject: 

Pasting those in isn't controversial, and is generally supported;
you could be using Subject: pasting today with most remailers,
using the ## syntax.

>(I would like to see Cc: and Bcc: being allowed to be pasted in also).
At minimum, addresses in Cc: and Bcc: need to be checked against
blocking lists, and it's probably worth checking the number of
names in the list against some threshold - especialy Bcc:s,
which tend to be popularly used by spamware.

>I would also like to see From: pasted in.  In fact I can see no
>purpose to restrict what can be pasted in, other than to reduce
>complaints to the remailer operator possibly.
Too easy to be abused by forgers, as are Reply-To: and Sender:.

>My software shows be all headers.  I am not sure what other software
>would do, probably, only display the first From field (the remailers).

MSMail and other closed systems are generally quite arrogant
about only showing you the mail headers they "know" you want to see,
and discarding the rest, whether that's what you want or not.
Lots of mail clients only show you one From:, either discarding 
others or making them available in a "Show all headers" mode.

>However you'll notice that my address is:
>	Amad3us <cypherpunks@cyberpass.net>
>which means that I would like it to be pasted in as it is replyable
>(for encrypted mail) even though not being a nymserver account.

Which is a bit annoying, by the way, for cypherpunks who don't
want to read your mail :-)  On the other hand, alt.anonymous.messages
is a fine place for people to send replies, and you can do things like
	alt.anonymous.messages@mail2news.some-relay-server.com
At one time, there was a message-pool service on the extropia remailer
which forwarded anything retrieved to all its subscribers;
if the list is small it's not much protection, but it's one way
to obscure mail sent to middleman remailers.

There are other remailer-like systems that provide mailboxes
for anonymous retrieval; I think Jenaer does something like that.
And then of course there are hotmail and juno :-)


				Thanks! 
					Bill
Bill Stewart, stewarts@ix.netcom.com
Regular Key PGP Fingerprint D454 E202 CBC8 40BF  3C85 B884 0ABE 4639