Oddbean new post about login | logout I just realized it will be better if hops were regular events with expiration dates instead of full-on ephemeral. So if a DVM gets offline for a few seconds, there wouldn't be a delivery problem.
Even better for privacy, suppose you could specify a delay between hops, and also specify a file size change (add or subtract useless data). Then once you got some mass of people using this, it would be extremely difficult to track events by either timing or size.