PGP: sequencing messages

Chris Adams pmmail@rpglink.com
Sun, 30 Apr 2000 13:20:22 -0700


On 05/02/00 05:24:19 AM jdrabik@xmission.com wrote:

>Simple sequencing won't do - somebody can just remove the line
>(although it could be argued that if EVERY message is sequenced, and
>you can prove that, then you might argue to the court that the
>document has been tampered with, and that perhaps other tampering was
>performed too).

There's no way to get what you want without sending each message 
individually. If you did start including some unique identifier ("To: 
leak@isp.net"?) in the part of the message which is signed and write a script 
to sign each message separately, a message would either reveal the recipient 
or fail the integrity checks. Of course, if they balk at providing digital 
copies that might be time to point out how trivial it is to forge email and 
how the only way to prove that you did in fact say something would be to 
verify the digital signature.

If you can't get digital copy, the only thing left is slightly altering the 
contents of each message for each recipient. This has the best survivability 
rate but is also by far the most work. One approach would be a modified 
mailing list program that you would send some specially formatted message to 
containing multiple variants for various bits of text; the list software 
would assemble a message for each recipient and store a list of which 
combinations went to which people. This would require you to generate 
alternate versions for enough blocks of text to produce unique combinations 
for everyone on the list.

In theory you could produce some sort of script which could do this sort of 
thing for you but I'm doubtful it would be good enough to produce real 
sounding English consistently.

As a side question, have you contacted the newsmedia and groups like the 
ACLU? I don't think there's even the slightest chance of getting out of this 
without a lengthy court battle and it sounds like it'd be well worth getting 
other people to help fund it.
-- 
# Chris Adams <chris@improbable.org>

Iles's Law:
	There is always an easier way to do it.  When looking directly
at the easy way, especially for long periods, you will not see it.
Neither will Iles.