> "Verifying the proof does require checking it against copies of the messages the server received. So with Riffle, users send their initial messages to not jus

> "Verifying the proof does require checking it against copies of the messages the server received. So with Riffle, users send their initial messages to not just the first server in the mixnet but all of them, simultaneously. Servers can then independently check for tampering." So every packet has to be sent to every server in the network? That's going to cause some scaling problems. It's especially curious that they mention file sharing as an application, because if the above is true this would be even less fit for that purpose than Tor. Maybe for low-bandwidth stuff like messaging. EDIT: From the paper, "However, each Riposte client must submit a message proportional to thesquare root of the size of the whole database (i.e., collection of all clients' data), making it unsuitable for sharing large messages among many clients" It goes on to describe use cases like microblogging and messaging. So I guess it's just the article author misrepresenting the thing.