Jeff Burdges

How does Relaynet differ from Briar? I think offline messaging sounds interesting, but tricky to bring into scope. I suppose one can look to briar for inspiration, meaning always use...

> Contrasting naive mailservers vs my understanding of multiple aggregation points idea. > > One way to provide async mesaging is to have "relay nodes" acts as mailboxes for end...

I opened a separate issue on feeds in #14 which describes doing feeds with a mixnet. We should glance over academic work that designs anonymous publish-subscribe systems though.

It'll be a Schnorr proof on both curves as once, so we'll likely define it over the underlying `Engine`, not over `EngineBLS`

Id the existing hard only derivation compatible with anything else like Trezor or whatever?

Page 4 of https://eprint.iacr.org/2021/273.pdf shows an advantage for multiplicative blinding in an OPRF used in some PAKEs. It's not at all the same situation, but.. It's worth considering if additive...

We should switch to multiplicative derivation since that's what Tor and GNUNet's GNS both do. If I recall, we cannot match Tor's approach but we can converge with GNUNet's version.

I avoid saying anonymous whenever I'm writing carefully, but frequently slip up due to the term being shorter. I'm happy with "privacy preserving" and frequently use it, but occasionally write...

There is necessarily some portion of the PKI that resembles the accounts database in a blockchain like Ethereum, so the problem is: 1. users should be lite-ish clients, 2. who...

Are you saying the readme should contain a working example?