Mix cascades

Use multiple nodes to distribute trust: any one node can provide anonymity.

Anonymity comes from more users, not more nodes.

Assumes a global adversary

Dangers: trickle attacks, easy to watch endpoints

Example: Web Mixes, Java Anon Proxy