Design Goals Deniability for clients Can't confirm that a client is intentionally retrieving censored data Statistical deniability for clients Web traffic doesn't look unusual Covertness for servers Can't discover a server that is serving censored content Defense against blocking Communication Robustness Should be difficult to disrupt request/transfer of censored content Reasonable Performance