> Clearly in this system we're not ever allowed to use it to transmit more than 1 MB per day, without destroying the metadata unobservability property. You're

> Clearly in this system we're not ever allowed to use it to transmit more than 1 MB per day, without destroying the metadata unobservability property. You're also not ever allowed to transmit links or anything else that goads the user into fetching a remote resource in response to a message.