Mixminion

This is a testing alpha release. You will probably only want to use it if you are technically inclined, curious, and interested in helping the Mixminion development effort. WARNING! Do NOT use this release if you require strong anonymity. It has known deficiencies, including some that make it possible for an adversary to trace your message through the system. NEW SINCE MIXMINION 0.0.7.1: License changed from LGPL to the so-called "MIT" license. This has been planned for ages; see Numerous bugfixes: Implement DESTDIR correctly. Do not crash when run with python 2.4 Bump preferred openssl version to 0.9.8a Work when umask setting is bizarre (0077, 0000, etc.) Make -P and mbox work correctly together. Catch over-long paths. Tolerate missing /dev/null Solve crash on mixminion clean-queue Do not exit on a spurious protocol string from another MMTP host. Do not use stdio to read /dev/urandom: This wastes entropy. Security improvements Regenerate SSL certificates more frequently. Servers schedule and retry delivery on a per-address basis, not a per-message basis. Drop support for pre-0.0.6 servers: Servers are now located by hostname. Add a "count-packets" command to tell how many packets will be needed to send a message. Some integrators need this. Add a "SendmailCommand" option for invoking an external program to send email rather than simply connecting to an SMTP server. Write much of ClientAPI, so Mixminion is easier to embed -- having this in a real release should make the Nymbaron team happy. Experimental pinger code, using pysqlite as a data store and implementing the "Echolot" remailer reliability algorithm. More work is needed. Partially implemented code for distributed coordinated voting directory servers. Client side and data formats are done; glue remains. Recommended versions are no longer hard-coded. Refactor how we learn about servers and generate paths. Split out option-parsing logic to make option lists more consistent. Suppress prompt when reading messages from non-TTY fds. Implement --status-fd option to dump info to would-be integrators. Better errors on expired certs STILL NOT IN THIS VERSION: IP-based restrictions don't work. No support for distributed directories. Other stuff too numerous to mention; see TODO. First, follow the installation instructions from section IV to install the new version of the software. 1) You must have Python version 2.0 or later installed on your system. The binary may be called "python", "python2", "python2.X", or something else. If you don't have Python =v2.0, go install it. You can find source and binary distributions at 4) Run "make build-openssl". If this step fails, OpenSSL didn't build correctly on your system. Go read contrib/openssl/INSTALL, and make OpenSSL build. If you have OpenSSL 0.9.7 installed, but the build script doesn't find it, you can force it to look in a particular location (say, "/home/ssl") with: make OPENSSL PREFIX=/home/ssl This will make the scripts look for headers in $OPENSSL PREFIX/include and libraries in $OPENSSL PREFIX/lib. If the scripts still can't find OpenSSL 0.9.7, you can override the compile and link options directly, like this: make OPENSSL CFLAGS='-I/home/ssl/include' OPENSSL LDFLAGS='-L/home/ssl/libraries -lssl097 -lcrypto097' 7) Run "make install" to install Mixminion. You may need to be root to execute this command. By default, Mixminion will install itself relative to your python distribution. If you want to install somewhere else (e.g. /home/miniond/), run "make install PREFIX=/home/miniond". Download 'Mixminion-0.0.8alpha2.win32.zip", and unpack it anywhere you like. It will create a directory named 'mixminion'. Download and run "Mixminion-0.0.8alpha2.win32-py2.3.exe". It will unpack its files into your Python directory. The script to invoke Mixminion will be stored in the 'Scripts' subdirectory of your Python directory. Whenever the instructions below tell you to run 'mixminion', run "python Scripts mixminion.py' instead,