1997-12-01 - Re: Pasting in From:

Header Data

From: ichudov@Algebra.COM (Igor Chudov @ home)
To: dlv@bwalk.dm.com (Dr.Dimitri Vulis KOTM)
Message Hash: d0388a4e64345f502aa9e18145f800111f94503eef8826403d4fd023badd10d4
Message ID: <199712011411.IAA04116@manifold.algebra.com>
Reply To: <egB2ge24w165w@bwalk.dm.com>
UTC Datetime: 1997-12-01 14:22:40 UTC
Raw Date: Mon, 1 Dec 1997 22:22:40 +0800

Raw message

From: ichudov@Algebra.COM (Igor Chudov @ home)
Date: Mon, 1 Dec 1997 22:22:40 +0800
To: dlv@bwalk.dm.com (Dr.Dimitri Vulis KOTM)
Subject: Re: Pasting in From:
In-Reply-To: <egB2ge24w165w@bwalk.dm.com>
Message-ID: <199712011411.IAA04116@manifold.algebra.com>
MIME-Version: 1.0
Content-Type: text



Dr.Dimitri Vulis KOTM wrote:
> "Robert A. Costner" <pooh@efga.org> writes:
> 
> > It seems to me that the purpose of a remailer is to strip the headers,
> > including the FROM header, not to put in fake headers.  Until someone can
> > explain it to me, I'd consider the idea of adding a FROM header to
> > anonymous mail to be asinine.
> >
> > Best I can tell, the only reasonable good purpose for this is to create a
> > persistent nym identity without a reply to capability.  Well, remailer
> > software cannot support everything I suppose. (Even if Cracker may
> > apparently support this)
> >
> > I would think the best way to put in a persistent nym capability would be
> > to database the PGP key id's along with the persistent identity.  Then the
> > remailer could produce lines like
> >
> > 	From: "Monty Cantsin" <anon@anon.efga.org>
> >
> > Persistent identities would be created by sending a signed PGP message that
> > includes both the PGP public key and the persistent identity.  Since the
> > identity server would not database email addresses, only PGP key id's, and
> > only work for signed messages, there should be no problem with people
> > worrying about the remailer being compromised.  This also keeps someone
> > from stealing another's reputation capital.
> 
> Igor's STUMP has a similar feature, although I don't think a lot of posters
> currently use it.

CBI news agency used to do it until it got tired of signing non-ASCII
messages.

One of the groups that uses STUMP went even farther and decided to allow
only PGP signed anonymous messages. I was really surprised when I saw
that provision.

	- Igor.






Thread