[tor-bugs] #5997 [Tor Sysadmin Team]: ML privacy enhancement: remove incoming mail path before sending mails to mailing list subscribers

[Tor Bug Tracker & Wiki]

#5997: ML privacy enhancement: remove incoming mail path before sending mails to
mailing list subscribers
-------------------------------+--------------------------------------------
 Reporter:  tagnaq             |          Owner:  phobos
     Type:  enhancement        |         Status:  new   
 Priority:  normal             |      Milestone:        
Component:  Tor Sysadmin Team  |        Version:        
 Keywords:                     |         Parent:        
   Points:                     |   Actualpoints:        
-------------------------------+--------------------------------------------

Comment(by mikeperry):

 Ok, well, since all we have is stop energy to work with here, lets see if
 we can route around it.

 Imagining the worst-case scenario, scrubbing sender "Received" headers
 from email could make it easier to spoof a subscriber and send mail as
 them.

 tagnaq: Does this happen on openwall? If not, why do you think that is? If
 so, how do you solve it?

 Perhaps there are other reasons I can't guess. But when people block
 without giving reasons, guessing is all we can really do.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5997#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online