lcottrell@popmail.ucsd.edu (Lance Cottrell) writes:

...

Say I post a message through remailers to Cypherpunks giving one of these reply blocks. The TLA need only send a flood of known size messages to this address, and look to see where the pop out of the net of remailers. Even if all messages were quantized and only reconstructed by the final recipient, the TLA could send timed bursts of messages which (even with reordering) would allow a statistical determination of the recipient.

In particular, this is rather rough on the "reorder and remail after N packets" approach to remailers - if N is 10, and the Bad Guys can inject messages into the system, they can tap and duplicate messages going into the remailers.... Bill