Re: Pasting in From:
![](https://secure.gravatar.com/avatar/fcf7f31bee2ddc338fe787f8acc224d7.jpg?s=120&d=mm&r=g)
-----BEGIN PGP SIGNED MESSAGE----- "Robert A. Costner" <pooh@efga.org> wrote:
But you don't need a special anonymity server to do that; a keyserver plus either a personna certificate or some archiving mechanism is enough. The certificate shows that you're the first+only person at that certificate issuer to use the name you've chosen; the archive shows that the first poster using the name <nym> used PGP Key <key>. I have a PGP key I use for signing pseudonyms which performs the personna certificate function - I'll verify uniqueness of keys that I've signed.
I was thinking of remailers sending out anon messages with a distinct from line that has zero connection (in the nym database) to any email address. Is this possible? To establish a nym only through one way communication?
I can think of a couple of ways this could be implemented. You could either allow the user to select an e-mail address to use, then do an nslookup to verify that the domain does not exist, or else choose a domain that's actually nothing but a bit bucket. The cleanest implementation might be to create a "bitbucket.efga.org", alias all incoming mail (except for perhaps "postmaster") to /dev/null, then assign non-replyable 'nyms off of that. That would eliminate the need for managing reply blocks and confirmation cookies. This is much more preferable to these people you see who post with a From: address of "nobody@nowhere.com", probably not realizing that nowhere.com is actually a real domain. But implementing such a server is still a lot more work than simply allowing From: headers to be pasted and allowing source blocking for anyone who is worried about being the victim of abuse of such a scheme. - --- Finger <comsec@nym.alias.net> for PGP public key (Key ID=19BE8B0D) -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBNIRgZwbp0h8ZvosNAQGC7gf+PRUB+6Zuxns3E+BWZoM3kkzn4MD9vcip 1MvQRFRvTTdvGM4vFySYcZByv7SQJdIiVZItyzMe4qMz+Ft/xpbWUYmz3mOpws9H RW3sbsFywNzp4pCxolKhMJ8QTQI/tHb3CHT6thHkbgjpzr4bJlL6trLKn+btY2d/ MdNq61oPCTq4YYdj9kC8WebngjfJZOvcvQhX1OLtUaagrpL8DiGxivGSz/Rdl6ZC Yr8m8m0V/l6WA4HG3ZKTDoBz6OBxI7VROZRZdJkCRHKgScQP9/4+UYnSbew1rAhE apoUG3Ds7kiIUoZ9gLz01sYvRRaWelIjIZLp+RfnMPvtwXexP2uA8Q== =+uAL -----END PGP SIGNATURE-----
![](https://secure.gravatar.com/avatar/8101d5073280f40a7c38e5397fae4bb7.jpg?s=120&d=mm&r=g)
-----BEGIN PGP SIGNED MESSAGE----- On 2 Dec 1997, Charlie Comsec wrote: [...]
I can think of a couple of ways this could be implemented. You could either allow the user to select an e-mail address to use, then do an nslookup to verify that the domain does not exist,
I would suggested useing "example.com" as such an address. This address is garoned to never be resolvable. - -- Please excuse my spelling as I suffer from agraphia see the url in my header. Never trust a country with more peaple then sheep. ex-net.scum and proud You Say To People "Throw Off Your Chains" And They Make New Chains For Themselves? --Terry Pratchett. I do not reply to munged addresses. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQCVAwUBNISLKqQK0ynCmdStAQGtFgP+I2up+A8PTl/a6mdCiXI7IUszGHqqjlO7 ExtLfl2hvbLbuWDrQVUZGk2Qwsc9xSj0NeFXlANROrZTcWQf6vVCMM6JVwW82qgE nnTtWpbtKqlhnvKkn4BKSnJd1UDsPribd/IsAGa5lGuzw7Yd4tMYDjkVg5FUdPgV +mdoZ3ATDd8= =uQTo -----END PGP SIGNATURE-----
participants (2)
-
? the Platypus {aka David Formosa}
-
Charlie Comsec