Re: Transparent Email

Responding to msg by eric@remailer.net (Eric Hughes) on Mon, 28 
Nov  9:54 PM


>I am still considering the "sign-or-delay" proposal for 
>the toad.com
>server, that is, sign your articles to the list or 
>they'll be delayed
>and eventually rejected.


Does not everyone get a complete header like the one below from 
Eric's post with incoming mail?  This is presented 
automagically by The Pipeline's system.

I had assumed that because every mail received here has such a 
header that everyone else could also see who sent my mail, 
signed or not.  That is why I have not signed my posts.

BTW, Pipeline does not allow anonymously-sent direct mail -- as 
a take it or leave it policy.  So we cannot manipulate headers 
to forge from this Windows-driven end.


John Young (redundantly, I thought)



>From owner-cypherpunks@toad.com Tue Nov 29 00:01 EST 
>1994
>   Received: from relay2.UU.NET (relay2.UU.NET 
>[192.48.96.7]) by pipeline.com (8.6.9/8.6.9) with ESMTP 
>id AAA09928 for <jya@pipeline.com>; Tue, 29 Nov 1994 
>00:01:20 -0500
>Received: from toad.com by relay2.UU.NET with SMTP 
>	id QQxsbj13332; Mon, 28 Nov 1994 23:59:02 -0500
>Received: by toad.com id AA15623; Mon, 28 Nov 94 
>20:55:57 PST
>Received: from largo.remailer.net ([204.94.187.1]) by 
>toad.com id AA15611; Mon, 28 Nov 94 20:55:29 PST
>Received: (from eric@localhost) by largo.remailer.net 
>(8.6.8/8.6.6) id VAA02536; Mon, 28 Nov 1994 21:54:14 
>-0800
>Date: Mon, 28 Nov 1994 21:54:14 -0800
>Message-Id: <199411290554.VAA02536@largo.remailer.net>
>To: cypherpunks@toad.com
>In-Reply-To: <199411282330.RAA00186@omaha.omaha.com> 
>(message from Alex Strasheim on Mon, 28 Nov 1994 
>17:30:22 -0600 (CST))
>Subject: Re: Transparent Email
>From: eric@remailer.net (Eric Hughes)
>Sender: owner-cypherpunks@toad.com
>Precedence: bulk
>Content-Type: text
>Content-Length: 6504

Does not everyone get a complete header like the one below from 
   Eric's post with incoming mail?  

Everyone gets it, but the better readers don't show it to the user.
Many people don't even know about those hidden headers, perhaps most.

   I had assumed that because every mail received here has such a 
   header that everyone else could also see who sent my mail, 
   signed or not.  That is why I have not signed my posts.

The Received: fields can be forged.  You can even forge your own with
the cypherpunks remailers and ##.

   BTW, Pipeline does not allow anonymously-sent direct mail -- as 
   a take it or leave it policy.  So we cannot manipulate headers 
   to forge from this Windows-driven end.

That's what the :: syntax was invented for, for folks who can't
manipulate headers in their systems.  The original purpose was for
Fidonet, and Tom Jennings, who couldn't use the remailers at the time.

What :: does is glue in the headers you want _at the receiving end_.
If your service passes message bodies with no harm, these soon-to-be
header fields will pass just fine.

Eric