Re: [tor-bugs] #5997 [Tor Sysadmin Team]: ML privacy enhancement: remove incoming mail path before sending mails to mailing list subscribers

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#5997: ML privacy enhancement: remove incoming mail path before sending mails to
mailing list subscribers
----------------------------------+-----------------------------------------
    Reporter:  tagnaq             |       Owner:  cypherpunks
        Type:  enhancement        |      Status:  assigned   
    Priority:  normal             |   Milestone:             
   Component:  Tor Sysadmin Team  |     Version:             
  Resolution:                     |    Keywords:             
      Parent:                     |      Points:             
Actualpoints:                     |  
----------------------------------+-----------------------------------------

Comment(by tagnaq):

 Replying to [comment:9 mikeperry]:
 > Imagining the worst-case scenario, scrubbing sender "Received" headers
 from email could make it easier to spoof a subscriber and send mail as
 them.
 >
 > tagnaq: Does this happen on openwall? If not, why do you think that is?
 If so, how do you solve it?

 Not that I would be aware of.

 It would be great to hear some arguments so that we can work something
 out.

 In my opinion the tor project should have some of the "strongest" privacy
 settings to protect its users. I do think that many people are not aware
 of the negative side effects on their privacy when posting to a public
 mailing list with its current settings.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5997#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs