Re: SASE Suggestion

[jim@bilbo.suite.com (Jim Miller)]

Lance Cottrell writes:

> I have been meditating on this problem of return
> addresses, and have a proposal. The remailers
> can not be allowed to choose the return path,
> as any corrupted remailer will corrupt the rest
> of the path.

As I understand it, the remailers don't "chose" the return path, Bob (the  
sender of the original message) choses the return path when he creates the  
SASE.  All the remailers do is interpret the part of the SASE that becomes  
readable to them after decrypting the SASE portion sent to them from the  
previous hop.  If all is working, what becomes readable is the address of  
the next hop (closer to Bob) and some misc other stuff (postage, maybe,  
and perhaps another encryption key).

Am I not understanding something correctly?

Jim_Miller@suite.com