The problem with this is that it is basically this "server x supposedly receives stuff and then sends stuff on without linking identities A and B". What if I d

The problem with this is that it is basically this "server x supposedly receives stuff and then sends stuff on without linking identities A and B". What if I don't trust server X to really be doing that? What if the government contacted owner of server X and altered the software not to do that? The system I am designing keeps anonymity without any need to trust the server. Hence the name. Don't trust anyone.