[Remops] bomb threats

remop at hermetix.org remop at hermetix.org
Fri Aug 31 00:36:26 BST 2007


On Thu, Aug 30, 2007 at 08:34:31PM +0100, Bananasplit Admin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> > What exactly was the procedure and the inner working ?
> > I read that an user can opt-out his address in all remailer at once.
> > Was this true ? What about his possible use as DoS enabler ?

> I'm not providing functionality for users to add themselves to the
> rab.blk as it's difficult to verify they own the address.  At the moment
> only remops can add addresses and they must sign the request using their
> adminkey.

I think it made all remailers participating in it share a central dest.blk.
It was more kind of a simple protocol where the client was uploading its
new blocked addresses as well as downloading new additions from other
remailers to the RAB. It make sense, because that way you can use the
individual blocking feature of a remailer to get your address block on
all participating remailers.

There could be website where users could get a list of participating
remailers and enter their address(es) to be blocked. There has to be
some address ownership verification scheme involved, of course.

If mix does confirmation on block requests (it should, but can't tell without
checking...) the cgi just have to send a block request using the user supplied
address as From: to a remailer participating.

Thanks for your work, it's appreciated.
--
Hermetix Admin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.mixmin.net/pipermail/remops/attachments/20070830/afe5f697/attachment.pgp 


More information about the Remops mailing list