Outline Anonymity is a network effect Usability: "whether it does what people want" Theory: How to align usability with security Practice: The deployed systems don't match up so well with the theory