[Remops] Opt-in for emails. A few comments

[Philippe Gauthier]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The main problem of an opt-in anonymous remailer system is that your
are reducing the recipient anonymity set dramatically. The "recipient
anonymity set" is the set of all subjects that may receive messages.
By purposely building a list of potential recipients over time, you
are increasing the probability of a particular message to be linked to
a particular recipient. Aggregating lists of potential recipients
(from several remailers) is clearly the wrong way to go.

In other words, an opt-in system forces the recipients to admit they
are the recipients of anonymous messages. Central authority is bad for
anonymity.

Finally, if anyone wants to experiment with the remailer network,
please add the "testing" flag to your remailer cap string. This should
be reasonably enough for users to know that they should not trust the
remailer for strong anonymity, and pingers will not show the remailer
in stats lists.

- --
Philippe Gauthier <philippe.gauthier at deuxpi.ca>
http://www.deuxpi.ca/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)

iD8DBQFFdEqKdX62PscofCQRAntMAKDSb8BSwC/Cm8GcfeK6adBxpxSOygCgpmST
RILX/i5nHQF+xF7lx5TX+NQ=
=5j28
-----END PGP SIGNATURE-----