Re:

[Johan Helsingius <julf@penet.FI>]

> Hi - I tried to use the anon.penet.fi remailer and got a warning that
> some people had hacked it to find out for which anonymous ID any user
> had.  It sounded like they would forge mail from the person they wanted
> to find out about, have it go through penet, and then go to themselves.
> Then they could look and see what anonymous ID it seemed to come from.

Precisely!

> This has been fixed by making people register a password with the remailer
> and then use it whenever they want to forward mail.

Yeah. A bit cumbersome, but at least it is an attempt to find a workable
compromise between security and ease of use. The password is only
required if you intend to mail to "unregistered" addresses.

	Julf