Seeking anonymity in an internet panopticon

Joan Feigenbaum,Bryan Ford

DOI: https://doi.org/10.1145/2714561

IF: 22.7

2015-09-28

Communications of the ACM

Abstract:The Dissent system aims for a quantifiably secure, collective approach to anonymous communication online.

computer science, theory & methods, software engineering, hardware & architecture

What problem does this paper attempt to address?

A Survey on the Technology of Anonymity

WANG Ji-lin,WU Qian-hong,CHEN De-ren,WANG Yu-min

DOI: https://doi.org/10.3321/j.issn:1000-436x.2005.02.019

2005-01-01

Abstract:The study of anonymous techniques was surveyed, corresponding definitions such as link-ability, anonymity and pseudonymity being differentiated, mechanisms used to realize anonymous communication such as Crowds, onion routing and Mix nets being discussed. New issues in the study of the technology of anonymity measurement, anonymous signature algorithm including ring signature and group signature and how to establish mutual trust in anonymous application was given out in the end.
Oblivious Blind Rendezvous for Anonymous Users

Zhaoquan Gu,Yuexuan Wang,Qiang-Sheng Hua,Francis CM Lau

DOI: https://doi.org/10.1007/978-981-10-3680-4_15

2017-01-01

Abstract:In this chapter, we present symmetric algorithms for the blind rendezvous problem between two anonymous users. In the setting, we fix Alg and ID as: $$\begin{aligned} RS = <{Alg-S}, Time, Port, {Anon}, {Obli}> \end{aligned}$$where $$Port \in \{Port-S, Port-AS\}$$ and $$Time \in \{Syn, Asyn\}$$. It is easy to see that there are 4 different rendezvous settings when Alg is fixed as symmetric, ID is fixed as anonymous, and Label is fixed as oblivious. Different from Chaps. 13 and 14 , we assume the users have no distinct identifiers to break symmetry in distributed computing. This anonymous setting makes the oblivious blind rendezvous problem difficult. In Sect. 15.1, we show the hardness due to such anonymity which gives rise to the result that no deterministic algorithm could exist for the oblivious blind rendezvous problem. Then, we present in Sect. 15.2 an …
Designing Anonymity

Paula Helm

DOI: https://doi.org/10.48550/arXiv.2110.09237

2021-10-03

Computers and Society

Abstract:Creating anonymity means cutting connections. A common goal in this context is to prevent accountability. This prevention of accountability can be problematic, for example, if it leads to delinquents remaining undetected. However, imputability can also provide protection against discrimination. In medical, religious or legal matters, this is of fundamental importance. Thus, when individuals actively establish anonymity, they do so mostly because they want to prevent certain information about them, that is, sensitive and/or compromising information, from being associated with their identities. By remaining inaccessible as individuals with respect to certain information about them, they can engage in forms of exchange that would otherwise be impossible for them. Examples include practices of exchange in (self-organized) therapy groups, acting out stigmatized sexual preferences, the role of anonymity in the performing arts, or political resistance movements. Given the variety of examples in which personal anonymity is important, it is not surprising that it is primarily these personal dimensions that are the focus of current debates about the increasing precariousness of anonymity in the face of new technical possibilities of data mining and processing. In this paper, we nevertheless - or precisely because of this - want to focus on another aspect of anonymity that has received much less attention so far. Namely, we assume that researching and working with and about anonymity can open up new perspectives on and for contemporary forms of knowledge production.
The fifteen year struggle of decentralizing privacy-enhancing technology

Rolf Jagerman,Wendo Sabée,Laurens Versluis,Martijn de Vos,Johan Pouwelse

DOI: https://doi.org/10.48550/arXiv.1404.4818

2014-04-18

Computers and Society

Abstract:Ever since the introduction of the internet, it has been void of any privacy. The majority of internet traffic currently is and always has been unencrypted. A number of anonymous communication overlay networks exist whose aim it is to provide privacy to its users. However, due to the nature of the internet, there is major difficulty in getting these networks to become both decentralized and anonymous. We list reasons for having anonymous networks, discern the problems in achieving decentralization and sum up the biggest initiatives in the field and their current status. To do so, we use one exemplary network, the Tor network. We explain how Tor works, what vulnerabilities this network currently has, and possible attacks that could be used to violate privacy and anonymity. The Tor network is used as a key comparison network in the main part of the report: a tabular overview of the major anonymous networking technologies in use today.
Support for Anonymous as vicarious dissent: Testing the social banditry framework

Giovanni A. Travaglino

DOI: https://doi.org/10.1177/1368430217722037

2017-08-18

Abstract:This research uses the social banditry framework to propose that voiceless individuals in an unjust context may express their grievances vicariously. Specifically, it holds that individuals who perceive the system as unjust but lack political efficacy, express their anger against the system as support for actors whose behavior disrupts the system’s functioning. These actors are situated outside conventional societal and political structures of power and institutions. To test the social banditry framework, two studies investigate attitudes toward Anonymous, a group of hackers who challenge the status quo using online tactics such as trolling. Study 1 ( N = 304) demonstrates that appraising the system as more unjust and perceiving lower political efficacy are positively linked to anger against the system, which in turn predicts more positive attitudes toward Anonymous. In contrast, stronger injustice-fueled anger and stronger political efficacy predict intentions to engage in direct forms of political action, such as protesting or voting. Study 2 ( N = 410) replicates these findings, and theorizes and tests the role of individualistic and collectivistic values in predicting vicarious and direct expressions of dissent. Study 2 demonstrates that endorsement of horizontal individualism predicts positive attitudes towards Anonymous, whereas horizontal collectivism predicts engagement in direct political action. Implications and directions for future research are discussed.

psychology, social
Anonymous Signature Schemes

Guomin Yang,Duncan S. Wong,Xiaotie Deng,Huaxiong Wang

DOI: https://doi.org/10.1007/11745853_23

2006-01-01

Abstract:Digital signature is one of the most important primitives in public key cryptography. It provides authenticity, integrity and non- repudiation to many kinds of applications. On signer privacy however, it is generally unclear or suspicious of whether a signature scheme itself can guarantee the anonymity of the signer. In this paper, we give some armative answers to it. We formally define the signer anonymity for digital signature and propose some schemes of this type. We show that a signer anonymous signature scheme can be very useful by proposing a new anonymous key exchange protocol which allows a client Alice to establish a session key with a server Bob securely while keeping her iden- tity secret from eavesdroppers. In the protocol, the anonymity of Alice is already maintained when Alice sends her signature to Bob in clear, and no additional encapsulation or mechanism is needed for the signa- ture. We also propose a method of using anonymous signature to solve the collusion problem between organizers and reviewers of an anonymous paper review system.
Quantum Secure Anonymous Communication Networks

Mohammad Saidur Rahman,Stephen DiAdamo,Miralem Mehic,Charles Fleming

2024-05-10

Abstract:Anonymous communication networks (ACNs) enable Internet browsing in a way that prevents the accessed content from being traced back to the user. This allows a high level of privacy, protecting individuals from being tracked by advertisers or governments, for example. The Tor network, a prominent example of such a network, uses a layered encryption scheme to encapsulate data packets, using Tor nodes to obscure the routing process before the packets enter the public Internet. While Tor is capable of providing substantial privacy, its encryption relies on schemes, such as RSA and Diffie-Hellman for distributing symmetric keys, which are vulnerable to quantum computing attacks and are currently in the process of being phased out.

Quantum Physics,Cryptography and Security,Networking and Internet Architecture
A Survey on Anonymous Communication Systems with a Focus on Dining Cryptographers Networks

Mohsen Shirali,Tobias Tefke,Ralf C. Staudemeyer,Henrich C. Poehls

DOI: https://doi.org/10.1109/ACCESS.2023.3242870

2023-01-13

Abstract:Traffic analysis attacks can counteract end-to-end encryption and use leaked communication metadata to reveal information about communicating parties. With an ever-increasing amount of traffic by an ever-increasing number of networked devices, communication privacy is undermined. Therefore, Anonymous Communication Systems (ACSs) are proposed to hide the relationship between transmitted messages and their senders and receivers, providing privacy properties known as anonymity, unlinkability, and unobservability. This article aims to review research in the ACSs field, focusing on Dining Cryptographers Networks (DCNs). The DCN-based methods are information-theoretically secure and thus provide unconditional unobservability guarantees. Their adoption for anonymous communications was initially hindered because their computational and communication overhead was deemed significant at that time, and scalability problems occurred. However, more recent contributions, such as the possibility to transmit messages of arbitrary length, efficient disruption handling and overhead improvements, have made the integration of modern DCN-based methods more realistic. In addition, the literature does not follow a common definition for privacy properties, making it hard to compare the approaches' gains. Therefore, this survey contributes to introducing a harmonized terminology for ACS privacy properties, then presents an overview of the underlying principles of ACSs, in particular, DCN-based methods, and finally, investigates their alignment with the new harmonized privacy terminologies. Previous surveys did not cover the most recent research advances in the ACS area or focus on DCN-based methods. Our comprehensive investigation closes this gap by providing visual maps to highlight privacy properties and discussing the most promising ideas for making DCNs applicable in resource-constrained environments.

Cryptography and Security
Seldom: An Anonymity Network with Selective Deanonymization

Eric Wagner,Roman Matzutt,Martin Henze

2024-12-02

Abstract:While anonymity networks such as Tor provide invaluable privacy guarantees to society, they also enable all kinds of criminal activities. Consequently, many blameless citizens shy away from protecting their privacy using such technology for the fear of being associated with criminals. To grasp the potential for alternative privacy protection for those users, we design Seldom, an anonymity network with integrated selective deanonymization that disincentivizes criminal activity. Seldom enables law enforcement agencies to selectively access otherwise anonymized identities of misbehaving users, while providing technical guarantees preventing these access rights from being misused. Seldom further ensures translucency, as each access request is approved by a trustworthy consortium of impartial entities and eventually disclosed to the public (without interfering with ongoing investigations). To demonstrate Seldom's feasibility and applicability, we base our implementation on Tor, the most widely used anonymity network. Our evaluation indicates minimal latency, processing, and bandwidth overheads compared to Tor, while Seldom's main costs stem from storing flow records and encrypted identities. With at most 636 TB of storage required in total to retain the encrypted identifiers of a Tor-sized network for two years, Seldom provides a practical and deployable technical solution to the inherent problem of criminal activities in anonymity networks. As such, Seldom sheds new light on the potentials and limitations when integrating selective deanonymization into anonymity networks.

Cryptography and Security,Networking and Internet Architecture
Double-edged Swords: The Good and the Bad of Privacy and Anonymity in Social Media

Mainack Mondal

Abstract:1 NEED FOR PRIVACY AND ANONYMITY IN ONLINE SOCIAL MEDIA SITES Online Social Media sites (OSMs) like Facebook and Twitter drastically changed the way users communicate with each other and share content. OSMs provide inexpensive communication medium that allows anyone to quickly reach millions of users. Consequently, in these platforms anyone can publish content and anyone interested in the content can obtain it, representing a transformative revolution in our society. However, the very strength of OSMs to easily reach millions of users also indicates that there might be dire consequences to the content publishers if it reaches wrong people. For example, A content creator might lose her job simply because her rant in Facebook might be viewed by her boss [3] or even worse, Government organizations might press criminal charges against an activist solely based on her political opinions expressed in OSM posts [2]. To that end, over time, as OSMs gradually become a medium for freedom of expression, specially in times of unrest [9], there is a strong need for protecting users and their freedom of expression. In other words, there is a need for more privacy and anonymity to the users in OSMs so that they can preserve their right to free speech without fear of repercussions from their Government or other authorities. However, there is a cost—more private and anonymous platforms can also be abused to hurt other users, e.g., via spreading hate, cyber bullying or trolling. In this talk, we will emphasize that we can leverage the OSM data as social sensors to understand privacy and anonymity practices in social media and improve upon them. Moreover, we argue that privacy and anonymity are double-edged swords—needed by many (e.g., activists during Arab Spring) but also abused by some to harm others. To that end, we argue that these social sensors might enable the OSM operators to stop the abuse too. We would next expand upon how social sensors can be used to (i) understand the need for privacy and anonymity and (ii) limit the abuse of these technologies

Sociology,Law,Computer Science
Hang With Your Buddies to Resist Intersection Attacks

David Isaac Wolinsky,Ewa Syta,Bryan Ford

DOI: https://doi.org/10.48550/arXiv.1305.5236

2013-05-22

Cryptography and Security

Abstract:Some anonymity schemes might in principle protect users from pervasive network surveillance - but only if all messages are independent and unlinkable. Users in practice often need pseudonymity - sending messages intentionally linkable to each other but not to the sender - but pseudonymity in dynamic networks exposes users to intersection attacks. We present Buddies, the first systematic design for intersection attack resistance in practical anonymity systems. Buddies groups users dynamically into buddy sets, controlling message transmission to make buddies within a set behaviorally indistinguishable under traffic analysis. To manage the inevitable tradeoffs between anonymity guarantees and communication responsiveness, Buddies enables users to select independent attack mitigation policies for each pseudonym. Using trace-based simulations and a working prototype, we find that Buddies can guarantee non-trivial anonymity set sizes in realistic chat/microblogging scenarios, for both short-lived and long-lived pseudonyms.
A Systematic Survey on Security in Anonymity Networks: Vulnerabilities, Attacks, Defenses, and Formalization

Daichong Chao,Dawei Xu,Feng Gao,Chuan Zhang,Weiting Zhang,Liehuang Zhu

DOI: https://doi.org/10.1109/comst.2024.3350006

2024-01-01

Abstract:The importance of safeguarding individuals’ privacy rights in online activities is unmistakable in today’s anonymity networks. Since the introduction of Mixnet by Chaum, numerous anonymity networks with different objectives and design principles have emerged, providing a diverse range of applications for privacy-conscious users. However, security issues in anonymity networks have persistently existed and continue to impact their survival and development. Each anonymity network presents distinct security challenges, making it more challenging for researchers to achieve a comprehensive and systematic understanding of their security. The current literature exhibits some unavoidable gaps, including the lack of vulnerability perspectives, a unified understanding of diverse attack types, defense perspectives, and theoretical perspectives. To address these gaps, we investigate prevailing attacks targeting anonymity networks from the viewpoint of network designers and operators. We use Tor, I2P, and Freenet (arguably the three most popular anonymity networks) as case studies. Starting with these attacks, we conduct an in-depth analysis of the vulnerabilities underlying them and explore related defense mechanisms and formal security. Specifically, we classify vulnerabilities into external and internal categories, utilizing the protocol stack of an anonymity network to guide the categorization of internal vulnerabilities. Furthermore, we examine their root causes. In addition to these aspects, we emphasize the importance of formal security in researching the security of anonymity networks by integrating the investigated vulnerabilities, attacks, and defenses. Through this comprehensive, thorough, and unified approach, this paper aims to provide insights into the security of anonymity networks and offer general research findings. Finally, we discuss ongoing challenges and future directions in this specific area.
Characterizing Social Imaginaries and Self-Disclosures of Dissonance in Online Conspiracy Discussion Communities

Shruti Phadke,Mattia Samory,Tanushree Mitra

DOI: https://doi.org/10.48550/arXiv.2107.10204

2021-07-22

Abstract:Online discussion platforms offer a forum to strengthen and propagate belief in misinformed conspiracy theories. Yet, they also offer avenues for conspiracy theorists to express their doubts and experiences of cognitive dissonance. Such expressions of dissonance may shed light on who abandons misguided beliefs and under which circumstances. This paper characterizes self-disclosures of dissonance about QAnon, a conspiracy theory initiated by a mysterious leader Q and popularized by their followers, anons in conspiracy theory subreddits. To understand what dissonance and disbelief mean within conspiracy communities, we first characterize their social imaginaries, a broad understanding of how people collectively imagine their social existence. Focusing on 2K posts from two image boards, 4chan and 8chan, and 1.2 M comments and posts from 12 subreddits dedicated to QAnon, we adopt a mixed methods approach to uncover the symbolic language representing the movement, expectations, practices, heroes and foes of the QAnon community. We use these social imaginaries to create a computational framework for distinguishing belief and dissonance from general discussion about QAnon. Further, analyzing user engagement with QAnon conspiracy subreddits, we find that self-disclosures of dissonance correlate with a significant decrease in user contributions and ultimately with their departure from the community. We contribute a computational framework for identifying dissonance self-disclosures and measuring the changes in user engagement surrounding dissonance. Our work can provide insights into designing dissonance-based interventions that can potentially dissuade conspiracists from online conspiracy discussion communities.

Social and Information Networks,Computation and Language,Computers and Society,Human-Computer Interaction
Dandelion: Redesigning the Bitcoin Network for Anonymity

Shaileshh Bojja Venkatakrishnan,Giulia Fanti,Pramod Viswanath

DOI: https://doi.org/10.48550/arXiv.1701.04439

2017-01-16

Cryptography and Security

Abstract:Bitcoin and other cryptocurrencies have surged in popularity over the last decade. Although Bitcoin does not claim to provide anonymity for its users, it enjoys a public perception of being a `privacy-preserving' financial system. In reality, cryptocurrencies publish users' entire transaction histories in plaintext, albeit under a pseudonym; this is required for transaction validation. Therefore, if a user's pseudonym can be linked to their human identity, the privacy fallout can be significant. Recently, researchers have demonstrated deanonymization attacks that exploit weaknesses in the Bitcoin network's peer-to-peer (P2P) networking protocols. In particular, the P2P network currently forwards content in a structured way that allows observers to deanonymize users. In this work, we redesign the P2P network from first principles with the goal of providing strong, provable anonymity guarantees. We propose a simple networking policy called Dandelion, which achieves nearly-optimal anonymity guarantees at minimal cost to the network's utility. We also provide a practical implementation of Dandelion.
DECENT: A Decentralized Architecture for Enforcing Privacy in Online Social Networks

Sonia Jahid,Shirin Nilizadeh,Prateek Mittal,Nikita Borisov,Apu Kapadia

DOI: https://doi.org/10.48550/arXiv.1111.5377

2011-12-16

Abstract:A multitude of privacy breaches, both accidental and malicious, have prompted users to distrust centralized providers of online social networks (OSNs) and investigate decentralized solutions. We examine the design of a fully decentralized (peer-to-peer) OSN, with a special focus on privacy and security. In particular, we wish to protect the confidentiality, integrity, and availability of user content and the privacy of user relationships. We propose DECENT, an architecture for OSNs that uses a distributed hash table to store user data, and features cryptographic protections for confidentiality and integrity, as well as support for flexible attribute policies and fast revocation. DECENT ensures that neither data nor social relationships are visible to unauthorized users and provides availability through replication and authentication of updates. We evaluate DECENT through simulation and experiments on the PlanetLab network and show that DECENT is able to replicate the main functionality of current centralized OSNs with manageable overhead.

Cryptography and Security,Networking and Internet Architecture,Social and Information Networks
Whistleblower protection in the digital age -- why 'anonymous' is not enough. From technology to a wider view of governance

Bettina Berendt,Stefan Schiffner

DOI: https://doi.org/10.48550/arXiv.2111.02825

IF: 14.4

2021-11-04

Artificial Intelligence

Abstract:When technology enters applications and processes with a long tradition of controversial societal debate, multi-faceted new ethical and legal questions arise. This paper focusses on the process of whistleblowing, an activity with large impacts on democracy and business. Computer science can, for the first time in history, provide for truly anonymous communication. We investigate this in relation to the values and rights of accountability, fairness and data protection, focusing on opportunities and limitations of the anonymity that can be provided computationally; possible consequences of outsourcing whistleblowing support; and challenges for the interpretation and use of some relevant laws. We conclude that to address these questions, whistleblowing and anonymous whistleblowing must rest on three pillars, forming a 'triangle of whistleblowing protection and incentivisation' that combines anonymity in a formal and technical sense; whistleblower protection through laws; and other norms and practices including organisational error culture.
Mitigating Barriers to Public Social Interaction with Meronymous Communication

Nouran Soliman,Hyeonsu B Kang,Matthew Latzke,Jonathan Bragg,Joseph Chee Chang,Amy X. Zhang,David R Karger

DOI: https://doi.org/10.1145/3613904.3642241

2024-02-28

Abstract:In communities with social hierarchies, fear of judgment can discourage communication. While anonymity may alleviate some social pressure, fully anonymous spaces enable toxic behavior and hide the social context that motivates people to participate and helps them tailor their communication. We explore a design space of meronymous communication, where people can reveal carefully chosen aspects of their identity and also leverage trusted endorsers to gain credibility. We implemented these ideas in a system for scholars to meronymously seek and receive paper recommendations on Twitter and Mastodon. A formative study with 20 scholars confirmed that scholars see benefits to participating but are deterred due to social anxiety. From a month-long public deployment, we found that with meronymity, junior scholars could comfortably ask ``newbie'' questions and get responses from senior scholars who they normally found intimidating. Responses were also tailored to the aspects about themselves that junior scholars chose to reveal.

Human-Computer Interaction
A secure distributed framework for achieving k-anonymity

Wei Jiang,Chris Clifton

DOI: https://doi.org/10.1007/s00778-006-0008-z

2006-08-05

The VLDB Journal

Abstract:Abstractk-anonymity provides a measure of privacy protection by preventing re-identification of data to fewer than a group of k data items. While algorithms exist for producing k-anonymous data, the model has been that of a single source wanting to publish data. Due to privacy issues, it is common that data from different sites cannot be shared directly. Therefore, this paper presents a two-party framework along with an application that generates k-anonymous data from two vertically partitioned sources without disclosing data from one site to the other. The framework is privacy preserving in the sense that it satisfies the secure definition commonly defined in the literature of Secure Multiparty Computation.

computer science, information systems, hardware & architecture
A Pluralist Approach to Democratizing Online Discourse

Jay Chen,Barath Raghavan,Paul Schmitt,Tai Liu

DOI: https://doi.org/10.48550/arXiv.2108.12573

2021-08-28

Abstract:Online discourse takes place in corporate-controlled spaces thought by users to be public realms. These platforms in name enable free speech but in practice implement varying degrees of censorship either by government edict or by uneven and unseen corporate policy. This kind of censorship has no countervailing accountability mechanism, and as such platform owners, moderators, and algorithms shape public discourse without recourse or transparency. Systems research has explored approaches to decentralizing or democratizing Internet infrastructure for decades. In parallel, the Internet censorship literature is replete with efforts to measure and overcome online censorship. However, in the course of designing specialized open-source platforms and tools, projects generally neglect the needs of supportive but uninvolved `average' users. In this paper, we propose a pluralistic approach to democratizing online discourse that considers both the systems-related and user-facing issues as first-order design goals.

Networking and Internet Architecture
Strong Anonymity for Mesh Messaging

Neil Perry,Bruce Spang,Saba Eskandarian,Dan Boneh

DOI: https://doi.org/10.48550/arXiv.2207.04145

2022-08-23

Abstract:Messaging systems built on mesh networks consisting of smartphones communicating over Bluetooth have been used by protesters around the world after governments have disrupted Internet connectivity. Unfortunately, existing systems have been shown to be insecure; most concerningly by not adequately hiding metadata. This is further complicated by the fact that wireless communication such as Bluetooth is inherently a broadcasting medium. In this paper, we present a new threat model that captures the security requirements of protesters in this setting. We then provide a solution that satisfies the required security properties, hides all relevant metadata, scales to moderately sized protests, and supports group messaging. This is achieved by broadcasting all messages in a way that limits the overhead of duplicate messages, ensuring that ciphertexts do not leak metadata, and limiting what can be learned by observing user behavior. We also build a model of our system and numerically evaluate it to support our claims and analyze how many users it supports. Finally, we discuss further extensions that remove potential bottlenecks in scaling and support substantially more users.

Cryptography and Security

Seeking anonymity in an internet panopticon

A Survey on the Technology of Anonymity

Oblivious Blind Rendezvous for Anonymous Users

Designing Anonymity

The fifteen year struggle of decentralizing privacy-enhancing technology

Support for Anonymous as vicarious dissent: Testing the social banditry framework

Anonymous Signature Schemes

Quantum Secure Anonymous Communication Networks

A Survey on Anonymous Communication Systems with a Focus on Dining Cryptographers Networks

Seldom: An Anonymity Network with Selective Deanonymization

Double-edged Swords: The Good and the Bad of Privacy and Anonymity in Social Media

Hang With Your Buddies to Resist Intersection Attacks

A Systematic Survey on Security in Anonymity Networks: Vulnerabilities, Attacks, Defenses, and Formalization

Characterizing Social Imaginaries and Self-Disclosures of Dissonance in Online Conspiracy Discussion Communities

Dandelion: Redesigning the Bitcoin Network for Anonymity

DECENT: A Decentralized Architecture for Enforcing Privacy in Online Social Networks

Whistleblower protection in the digital age -- why 'anonymous' is not enough. From technology to a wider view of governance

Mitigating Barriers to Public Social Interaction with Meronymous Communication

A secure distributed framework for achieving k-anonymity

A Pluralist Approach to Democratizing Online Discourse

Strong Anonymity for Mesh Messaging