RE: Some thoughts on the Chinese Net

On Feb 15, 1996 15:17:51, '"Robichaux, Paul E" <perobich@ingr.com>' wrote: 
 
 
> 
>Now that all information has a recognizable source, dissidents in China  
>can be arrested, and unacceptable information never makes it into the  
>country. 
> 
>Registering IP addresses of course won't block out thoughtcrime
originating  
>outside China, but unless everyone else adopts the packet signing scheme
you  
>outline the censors will still have to filter incoming material  
>semi-manually. As far as I can tell their government is at least as  
>interested in keeping things in as they are keeping out the Four Horsemen.

> 
 
Assuming this system is estabished, then we would want to modify our
remailers to strip IP packet information as well as normal header, no? 
 
--tallpaul

tallpaul writes: 
[re: hypothetical Chinese IP address-based filtering]
> Assuming this system is estabished, then we would want to modify our
> remailers to strip IP packet information as well as normal header, no? 

I'm not entirely sure what you mean. Present remailers don't save anything
except for (parts of) RFC 822 message bodies, and occasionally some SMTP
mail headers. Certainly no packet-level headers (like IP) are saved at all.

Presumably The Chinese Wall (and many other gateways, routers, etc.) would
simply drop any packets that managed to arrive without originating IP address
information. You could use something that emits packets with "incorrect" /
"forged" IP headers, but that crosses an ethical line that I consider rather
important not to cross. The IPsec WG has been working on interhost 
authentication that should render the point moot, anyway.

-Lewis	"You're always disappointed, nothing seems to keep you high -- drive 
	your bargains, push your papers, win your medals, fuck your strangers;
	don't it leave you on the empty side ?"  (Joni Mitchell, 1972)