> That is a little tricky though, because there has to be some record that ties the user to the post itself - which defeats the purpose of anonymous posts. In t

> That is a little tricky though, because there has to be some record that ties the user to the post itself - which defeats the purpose of anonymous posts. In the case of a database leak, that connection is out in the public. We don't want that. And if it's a randomly generated string then it's only useful if the attackers can discover who it belongs to... I don't see the issue.