Yeah, I was assuming the JWT might not be the best, but my point was that it's a simple example that doesn't require someone to read a math-heavy page. > I thi

Yeah, I was assuming the JWT might not be the best, but my point was that it's a simple example that doesn't require someone to read a math-heavy page. > I think you're severely underestimating the efficacy of traffic analysis and correlation efforts. The porn site would have the public key already stored/cached, so there isn't any traffic to correlate. There's still an issue with the first request, but like I said, this is a simple example that's easy to understand without getting into anything math-heavy.