TABLE A – Verification of Data 

Data held in database 

Yes/No 

Correction / Completion 

Evaluation of IMS 

Evaluator:  

Christian Krause 

Yes 

Organisation:  

ICCP 

Yes 

Date of evaluation:  

14-Oct-2005 

Yes 

Identification of IMS 

Sources of information:  

http://www.spamgourmet.com/

Yes 

Version:  

No 

1.22 

Manufacturer:  

diverse 

Yes 

Nature:  

private 

Yes 

Country:  

n.a. 

No 

USA 

Regions:  

Global 

Yes 

Language:  

ENGLISH 

No 

Various (15 total for user interface) 

State:  

Available 

Yes 

Open/Closed:  

Open IMS: the identities work with several systems or applications. 

Yes 

Platform & Environment 

Requirements:  

Browser, E-Mail client 

Yes 

Number of users:  

>100.000 users. Server-software is OpenSource, but no installation-base apart from the developer’s service is published. 

Yes 

(there are other installations, but not published) 

Standards:  

none 

No 

SMTP (but I may be misinterpreting this question – if it’s referring to privacy standards, then yes, it’s correct) 

Description of Server - Side components:  

software is written entirely in PERL 

Yes 

Description of methods:  

An account is created wherin the user’s mail-address is being stored. After registration, users can generate one-time addresses connected to their account. Mails sent to this address are forwarded only for a specified period, e.g. four times. 

No 

Text is correct, but I would substitute the phrase “limited use” for the phrase “one-time” 

Descriptor of Client -
Side components:

Browser to register with the service, E-Mail client to receive one-time mail 

No 

Same comment as immediately above – substitute “limited use” for “one-time” 

Seals:  

No  

Yes 

Which seal:  

Yes 

Third party:  

no 

Yes 

Which third party:  

Yes 

Features:  

The service hides the original mail-address. Since the specific username appears in every generated one-time address, there is only pseudonymity given. 

Yes 

Screenshot picture:  

spamgourmet-screen.png

Yes 

(will have to trust you on this one) 

Flowchart:  

none

Yes 

Cost 

Price:  

0 

Yes 

Comment to the Cost:  

Type & Class of IMS 

Type of IMS:  

Type 3: IMS for user-controlled context-dependent role and pseudonym management.  

Yes 

Class of IMS:  

Class 2: Systems/applications with another core functionality. 

Yes 

Functionality:  

Spamgourmet’s main purpose is avoiding spam. Generating multiple addresses is used as an instrument. 

Yes 

Suggestions:  

There are two ways spamgourmet can be operated: 1. Make up addresses like "someword.x.user@spamgourmet.com", where "someword" is a randomstring and x is the number of mails that shall be received. 2. The above structure can be combined with "watchwords". These are user-generated and stored in the service. Only mails to addresses containing one ore more watchwords are forwarded. This makes it harder for attackers to construct a valid address from scratch. The service allows to create arbitrary mail-addresses and thus avoid spam, although linkability of these created addresses is not averted due to identical unique strings (the username) in all generated addresses. 

No 

Text is correct, but there are other features, including the ability to send email as if it came from a disposable address