Passive subpoena attack Eve can record messages for later subpoena She can also recognize her own messages, which helps with flooding attacks Fix: Link encryption with ephemeral keys (rekeyed every message / few minutes)