Indeed, concealing metadata is much more problematic than concealing the payload. However, the costs of attacks on sufficiently large mixnets is huge, as compar

Indeed, concealing metadata is much more problematic than concealing the payload. However, the costs of attacks on sufficiently large mixnets is huge, as compared to costs of attacks on modern day mostly-cleartext Internet. Every serious router out there has NetFlow/SFlow support, but I believe there are no common ISP-grade products are capable of pulling off timing attacks, for example, on I2P or Tor. I also think, the political solution should be explored in the area of government and corporate transparency and personal data handling laws, so we may have a better chance to know when a database containing our personal data is built. Maybe, explicitly legalizing ang encouraging whistleblowing about any databases containing personal data on more than a certain amount of persons, whatever secret status it may have... I don't know. The only thing I'm sure, is that a law that spies must not spy is going to be violated, for certain.