[Cryptography] NSA and Tor was Updates on Durov charges in France

[efc at disroot.org]

On Sat, 7 Sep 2024, Christian Huitema wrote:

> relying on mega-scalers has its own problems: it contributes to more 
> concentration on the Internet, and even if we believe that these big 
> mixers are not somehow doing surveillance capitalism, they become an 
> attractive point for legal attacks. So maybe as a general practice we 
> ought to rely on a large number of medium size relays, instead of just a 
> few big ones.

One question when it comes to public encrypted services that I think is
neglected, is project and legal governance.

Companies can easily be shut down, or opened up by law enforcement.
Individual programmers can be threatened, open source projects can be
infiltrated.

Once you're in the inside, it is way easier to attack a project.

How would you protect against those types of attacks? Is there anything
organizational or legal, one can do, to reduce the possibility of those
things?