anon.penet.fi

>What is your policy on chaining to anon.penet.fi?

Hmmm, it would be bad to post to anon.penet.fi through a remailer, as the
anon id assigned by penet would be associated with the remailer, _not_ with
you.  Therefore, people who responded to the message would actually be
sending mail to the operator of the remailer that was the hop into penet. 
Not to mention the fact if the remailer account were also a personal
account, and the operator was a client of penet, that his anon id could be
compromised in this way (if he was foolish enough not to have a password).

Therefore, it seems reasonable that remailers should refuse to mail into
penet, unless and until a non-anonymous reply to anonymous mail facility
becomes available there.

To the penet knowledgeable: is my understanding correct?


Scott Collins         | "Few people realize what tremendous power there
                      |  is in one of these things."     -- Willy Wonka
......................|................................................
BUSINESS.   voice:408.862.0540  fax:974.6094   collins@newton.apple.com
Apple Computer, Inc.   1 Infinite Loop, MS 301-2C   Cupertino, CA 95014
.......................................................................
PERSONAL.   voice/fax:408.257.1746    1024:669687   catalyst@netcom.com

>Therefore, it seems reasonable that remailers should refuse to mail into
>penet, unless and until a non-anonymous reply to anonymous mail facility
>becomes available there.

There is already non-pseudonymizing reply available for pseudonymous
mail.  It periodically comes up on the list, and is periodically
corrected.  The irony of the situation is that the solution was
invented on this list a few months ago.

Solution: if you send to na12345@anon.penet.fi, then your mail won't
be pseudonymized; if you send to an12345@anon.penet.fi, then your mail
will be pseudonymized.

	an = anonymous
	na = not anonymous

Eric

> To the penet knowledgeable: is my understanding correct?

It depends on the remailer.  Mine, for example, sends messages with a
From: line of "eli-remailer@jarthur...", and some others do similar
things.  I believe this address already has a penet address.  I have
no problems with chaining from here to penet, though I suggest making
it clear that 1) attempts to reply will result in an ugly bounce, and
2) the persona using the chained ID can be identified only by
continuity of digital signature.  IMHO, this is useful way of bumping
the anonymity level up a notch over posting directly with penet -- an
attacker needs both penet's lists and a bunch of sendmail logs.
Others, including Julf, may feel differently, as this provides some
degree of "hit-and-run anonymity".

	 PGP 2 key by finger or e-mail
   Eli   ebrandt@jarthur.claremont.edu