Designing for Anonymity: IP Logging, Metadata, Identity and Access Control

When we started designing the whistleblowing channel at Sigilo Profissional, one requirement sounded deceptively simple: The person submitting a report must be able to remain anonymous. At first, th