Peter Eckersley

Reading this again: as the language above is drafted, it isn't really specific to governmental requests for data; it would apply equally to a civil subpoena for a user's data...

It doesn't seem as though 31 days is necessary for measuring monthly uniques: there should be numerous good methods for that that don't require tracking, such as setting low entropy...

Where this wound up was that several extremely large websites of different sorts told us that they might hypothetically ask for 30 day retention as a condition of signup, but...

This is definitely going to be important post-launch work. We should also evaluate hosting platforms and CDNs to ensure that they are DNT compatible, and whether they are DNT compatible...

One thing you could do is write a torrc file with a bunch of bridges and obfsproxy stuff in it, and switch to that if you see sustained evidence that...

I think we need to add 1-2 more CAs before this code is widely installed, so that something breaking at StartCom couldn't break all updates in the field. The easy...

It's a pity I waited until now to do this, because we've missed a lot of interesting data from the launch... but on the server side we are now getting...

@Rangak not surprised, just noting that I'd solved part but not all of this.

This is an interesting question. The original vision had been to record a link to a URL that would capture the "user experience" of someone looking at the policy documents....