> But the LEAF itself is encrypted, including the session key, so > enemies can't do traffic analysis based on the LEAF. But the police can. They can decrypt the LEAF even without an escrow key. You use a family key to do that. Precisely my point.