QS Nym security.
QuickSilver
You were correct my friend. The mixmaster chain was moved to the pasted
headers inside and as such completely useless. I don't know what I can
say to all Nym Wiz testers other than I am so sorry. I have fixed the
problem, but the breach in security cannot be taken back.
Again, I am deeply sorry for this failure.
Richard
In article <fd1be20a1f82114a...@anonymous.poster>
An Metet <anm...@freedom.gmsociety.org> wrote:
>
> Hi again all,
>
> Sorry about the missing end to the original post!
>
> I may be wrong here, indeed I hope so, but it appears that when
> sending a message through a nym using QS, the format:
> Host: myusual
> From: me@myself
> Chain: *,*
> Nym: x@nym
> To: somebody
> Subject: yyy
>
> message
>
> is changed after queueing to:
> Host: myusual
> From: me@myself
> To: send@nym
>
> From: x
> To: somebody
> Chain: *,*
> Subject: yyy
>
> Message
>
> The above is not complete, there is pgp info, and the whole thing
> appears to encrypt fine for sending to the nymserver. My concern
> is the Chain: command moving to the message area.
> I suspect that if this message were sent, it would go through the
> nymserver o.k with the Chain: appearing somewhere in the headers.
> However it would go direct to the nymserver, thereby exposing the true
> sender to the nym server. This is not good.
> I hope I'm doing something wrong, if so, maybe some kind soul
> would post a correction.
Richard
- --
R.Christman
Benchmark Software
quick...@skuz.net
http://quicksilver.skuz.net
-----BEGIN PGP SIGNATURE-----
Version: N/A
iQBVAwUBOxAmm/kiDnOECmYBAQEjWgIA3kbjqVkHuG+8Xv5fMeVub78Whuk+fBv2
jGyKOrpK69PEpr6gbElHR6hqP5mUyLTlqoy0WeX7yoP41f40uieShw==
=50kF
-----END PGP SIGNATURE-----