You too, buddy. I've been here and on Lobste.rs mostly. All my CompSci papers are in my Lobsters stories if you want to check those out. " The Snowden document

You too, buddy. I've been here and on Lobste.rs mostly. All my CompSci papers are in my Lobsters stories if you want to check those out. " The Snowden documents and Hayden's comment on killing people based on metadata made it clear something that's anonymous by default was the way to go." Definitely a concern. Definitely should be an option. Just gotta remind you that the NSA and some other groups automatically classify people using Tor as folks to watch. Whereas, HTTPS at McDonald's WiFi doesn't get that designation. Avoiding Tor can help you avoid getting noticed in the first place. Depends on user's threat model. So, make sure it supports ability to not use Tor even if Tor is default. "and after I asked about OnionShare's (that's also written on Python) Tor connectivity, Micah Lee kindly pointed me to the direction of Stem. Stem's author Damian Johnson and other members of Tor Project were really helpful and I can't thank them enough." Sounds like how OSS development and communities are supposed to work! :) "DoS is indeed one of the unsolvable problems." Good thinking so far. For non-anonymous routes, perhaps investigate some setup that operates behind Cloudfare to get their DDOS resistance. They just become an extension of the untrusted, network component. Could make that part modular so users can swap out the service provider or even use their own anti-DDOS appliances in data center with big pipes. It's just hard to beat the big, centralized providers since vast majority of solving DDOS is huge pipes and the right hardware/software for detection.