Re: anon-HTTP server w/o root access

-----BEGIN PGP SIGNED MESSAGE-----

- -----BEGIN PGP SIGNED MESSAGE-----

someone writes:
$ an anon-http proxy server would probably consume much more in 
$ the way of network resources than a remailer, which will  
$ likely lead to many being shutdown once discovered by the sysadmins  

That might be somewhat less true on a commercial provider than on an 
educational or corporate provider, but in any case a WWW anon-server would be
seen as a much larger potential security hole than a remailer. A couple of
months ago a "friendly" outsider gained unauthorized access to user files
here via our Web server, and reported it to the sysadmins. I would have been
mighty nervous if I'd been offering anon WWW access to the world.

- -----BEGIN PGP SIGNATURE-----
Version: 2.6.1

iQCVAwUBLvd5y2f7YYibNzjpAQFBlwP/dp2gm/Ek3HOZ89SR0x/XpEXVTeHiHTzy
8QddAR35OrONJBUfZO81NyNXfthSmQEN6+d2GfQ7pm2ZupEpHlunWhokYrd6dnmo
1Cbkzi3/eCt0MsH5cTYKZ/JQ0kPRjEUpJdRaRjAfQf18VMRPpXM8D9SzVp/bwRVs
iBiZKFfGkqI=
=7jHV
- -----END PGP SIGNATURE-----
- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBLvd7ACoZzwIn1bdtAQHAiAF6AsXil0bJAgMJpyTJgo7cYW51+Ywz2uIR
/bIM2Vew7GoE/yUXoiJkjUzLh35/hRtk
=2jos
-----END PGP SIGNATURE-----

> someone writes:
> $ an anon-http proxy server would probably consume much more in 
> $ the way of network resources than a remailer, which will  
> $ likely lead to many being shutdown once discovered by the sysadmins  
> 
> That might be somewhat less true on a commercial provider than on an 
> educational or corporate provider, but in any case a WWW anon-server would be
> seen as a much larger potential security hole than a remailer. A couple of
> months ago a "friendly" outsider gained unauthorized access to user files
> here via our Web server, and reported it to the sysadmins. I would have been
> mighty nervous if I'd been offering anon WWW access to the world.

I'd be happy to setup a machine at my providers site do run
a test of anonymized httpd.  From what I understand they wouldn't
mind helping either.

Within the next 6 months, there probably will be a number
of for pay anonymizer services availible on the net.  It just
makes too much sense for it to not happen.