Mixnets and the limits
Why it matters No privacy tool protects against everything. Knowing what Tor is good at, what it cannot do, and what the slower alternatives buy you lets you pick the right tool and give honest advice to friends.
Imagine a post office that does not forward letters straight away. It collects a sackful, shuffles them, waits a random time, then sends them all out together, and it posts some blank letters too. Someone watching the doors can no longer tell which letter in matches which letter out. You pay for that with time: your letter arrives later.
Mixnet: an anonymity network whose relays (mixes) delay, reorder and batch messages, often adding cover traffic, so timing no longer links what goes in to what comes out.
Latency: the delay between sending something and it arriving. Web pages need low latency to feel usable.
The trade-off
The last two labs showed that timing links flows at both ends of a low-latency network. A mixnet attacks exactly that weakness: by delaying and shuffling, it destroys the timing pattern. Constant-rate sending, which you measured, is a close relative. Researchers have argued you can have at most two of three: strong anonymity, low bandwidth overhead and low latency. Tor picks low latency and modest overhead; a mixnet picks strong anonymity and pays in delay, bandwidth or both.
That is why mixnets suit messages and email, where seconds or minutes do not matter, and Tor suits browsing, where they do. Research designs such as Loopix (2017) showed how to tune delays and cover traffic for messaging.
When Tor helps
- Hiding your IP address, and so your rough location, from the sites you visit.
- Hiding which sites you visit from your own network, your internet provider or the Wi-Fi you are on.
- Reaching sites when your network blocks them.
- Making you look like many other users, if you use Tor Browser as it comes, because it is built so its users' fingerprints look alike (checked October 2026).
When Tor does not help
- You tell the site who you are. Log in, and the site knows it is you, whatever route you took.
- Someone watches both ends. As you measured, timing can link them.
- Your browser stands out. Adding extensions or changing settings in Tor Browser can make you unique again, undoing the "look alike" protection.
- Your device is compromised. Malware sees everything before it is encrypted.
- Files open outside the browser. A downloaded document can fetch things directly, skipping Tor.
- Plain HTTP. The exit can read and change it.
A common misconception: "Tor makes me anonymous." Tor makes your network route hard to trace. Anonymity also depends on what you reveal, what your browser reveals, and who can watch the edges of the network.
Honest advice in one paragraph
If you want a site, or the network you are on, not to learn where you are or where you go, Tor Browser used as it comes, with HTTPS sites and without logging in to your everyday accounts, is a strong choice. If you need to hide from someone who may watch both your connection and the site, low-latency tools cannot promise that, and slower, mix-based tools for messages are the better fit.
Try it Take three things you do online (for example reading the news, messaging a friend, checking your bank). For each, write one line: who you want to hide from, whether Tor would help, and what would undo it.
Recap
- Mixnets delay, shuffle and pad to break timing links, at the cost of latency and bandwidth.
- You cannot have strong anonymity, low overhead and low latency all at once.
- Tor helps hide your IP and your destinations from the network; it does not help if you log in or someone watches both ends.
- Use Tor Browser as it comes, with HTTPS, and keep everyday logins out of it.
This lesson is locked
Lessons open one at a time. Finish the previous lesson to unlock this one.