// COMPLETE THREAD

Encrypted list software

3 expanded posts ยท every known parent and child

NODE 51c83b5cEncrypted list software
-----BEGIN PGP SIGNED MESSAGE-----

I've had a couple of people ask to have their names added to the
encrypted list forwarder I put together.  I'm soliciting feedback on
how this service should work.

Right now, it only encrypts the "body" of the message.  The "headers",
which are the "From:" and "Subject:" lines, etc., are passed through
basically unchanged (except for "To:", which I change to be the person it
is going to.  Maybe that's unnecessary, as I notice that the cypherpunks
list puts its own address into "To:", for some reason.)  It also adds
"Encrypted: PGP" to the headers.

I wonder if it would be better for it to encrypt the whole message, headers
and body together, then to mail that with a fresh new header that would
show nothing about the original message.

The first approach hides the contents of the message, but not its subject
or who it is from; the second hides more.  Any suggestions as to which is
more useful?

Hal Finney
hfinney@shell.portal.com

-----BEGIN PGP SIGNATURE-----
iQCUAgUBLDoazagTA69YIUw3AQEVIQP4yImWVmyipsNbMUu8pX4QkyPx9T/95MVP
lTc+LAFwACUSbm2/DNTqLOLbDhb9rnMlHT/926mjoJFC4H3xQn61oXzM50GtRiaY
ORJOxJ8CVqmQE7RW51jEAM0wIH4L2CDhveudY6r2ZX7uLjmybkdHJy4G5BSb46cD
x5h93fOyXg==
-----END PGP SIGNATURE-----
NODE e21d6097Re: Encrypted list software
Your message dated: Tue, 06 Jul 1993 21:03:30 PDT
>-----BEGIN PGP SIGNED MESSAGE-----
>
>I've had a couple of people ask to have their names added to the
>encrypted list forwarder I put together.  I'm soliciting feedback on
>how this service should work.
>
>I wonder if it would be better for it to encrypt the whole message, headers
>and body together, then to mail that with a fresh new header that would
>show nothing about the original message.

I think encrypting who the message is from and the subject would be
best that way I can have a subject of "Plans to Kill Pauly Shore"
after I decrypt the message.

For how the service should work, I think you should look into MIME. You 
can include encrypted text that will decrypt when you read it with
your mail program.

Chris
NODE 5d758b66Re: Encrypted list software
-----BEGIN PGP SIGNED MESSAGE-----

> I think encrypting who the message is from and the subject would be
> best that way I can have a subject of "Plans to Kill Pauly Shore"
> after I decrypt the message.

> For how the service should work, I think you should look into MIME. You 
> can include encrypted text that will decrypt when you read it with
> your mail program.

Well actaully, since we just recently got perl installed on our system,
I have been playing around with the elm and nn scripts.  They seem to
work resonably well, but it looks like they need a little work.  The do
detect if the message is PGP encrypted or if it has a PGP signature in
it and when I mail things it asks if I want to sign it or encrypt it.
They need a little polishing but they do work.  Anyone else has any
experience using this? anyone got any suggestions?
Sometime when I am not so tired I am going to play with the emacs and
tin scripts.

- -- 
Ryan A. Whelan  "Only two good things came out of Berkeley, LSD and BSD,
rwhelan@mason1.gmu.edu    rwhelan@cosmos.gmu.edu    coincidence???"
rwhelan@gmuvax.gmu.edu   
PGP Public Key available via finger    "If its not UNIX, its crap"

-----BEGIN PGP SIGNATURE-----
Version: 2.3

iQCVAgUBLDpmSxGKBstqmlA7AQHHQwQAjSnhBqjU28HAjYN87g7iSSwfZxRYxrdY
ArpkU89N72CW1NgEQnLoZGYmyVuXNdmMn7qVJrEPXM5ivT/iGgiLmrUsiFSe1mtF
gt20XyQ/VYO74M3DI7wC3tUcn63lRaJO79rYjenQKL6g4HPdIZxYjJMj6TlEzPK3
ULahI5aALys=
=zUm7
-----END PGP SIGNATURE-----