[65042] in Cypherpunks
Re: strengthening remailer protocols
daemon@ATHENA.MIT.EDU (Wei Dai)
Mon Sep 9 18:13:37 1996
Date: Mon, 9 Sep 1996 14:39:11 -0700 (PDT)
From: Wei Dai <weidai@eskimo.com>
Reply-To: Wei Dai <weidai@eskimo.com>
To: Lance Cottrell <loki@infonex.com>
Cc: Cypherpunks <cypherpunks@toad.com>, remailer-operators@c2.org
In-Reply-To: <v03007817ae5963e47e23@[206.170.115.3]>
On Sun, 8 Sep 1996, Lance Cottrell wrote:
> Mixmaster prevents replay, so flooding multiple copies of a single message
> will not work. This is the reason Mixmaster has no reply block feature. I
> can see two ways in which replies can work safely.
How about a combination of the two? Suppose Alice wants to anonymously
post a message and get replies. She generates a new RSA key, signs her
post with it, and asks readers to send encrypted replies to a server.
Then periodicly she sends a one-time reply block to the server to retrieve
the accumulated replies.
This would let Alice receive an unbounded number of replies and also give
some protection against the denial-of-service and rubber-hose attacks
Lance described.
Wei Dai
