> that's your entire message history irrevocably exposed to the world. That's not true. For example, Bitmessage has chans which are essentially mailing lists.

> that's your entire message history irrevocably exposed to the world. That's not true. For example, Bitmessage has chans which are essentially mailing lists. In this case the key is supposed to be known/distributed. Recipients use it to read and publish to the mailing list while hiding their list subscriptions and access patterns. That would continue to work even if a flaw in the crypto is found (at least as long as the proof-of-work hashing algo can continue to perform its function without flaw).