Page 112 - Cyber Defense eMagazine RSAC Special Edition 2025

that log metadata (e.g., phone numbers and IP addresses), each node in an onion-routed network only
knows the previous and next hop for the message. They do not see the content or metadata of the
message, making traffic analysis and surveillance significantly more challenging.

3. Decentralization and Censorship Resistance

Unlike centralized communication platforms, onion routing operates on decentralized networks,
eliminating single points of failure in the routing process. This prevents governments and corporations
from easily censoring or intercepting messages. Even if an individual node is compromised, it cannot
expose the entire communication path, making onion routing a powerful tool for activists, journalists, and
anyone facing surveillance threats.

In the modern digital age where privacy is increasingly under threat, encrypted messaging apps have
become vital. However, traditional encryption methods alone are not enough. To truly obscure sender
and receiver identities, messaging platforms that implement onion routing or multi-hop routing ensure an
additional layer of protection. One that masks IP addresses and user locations, making tracking and
surveillance exponentially more difficult. Implementing onion routing also demonstrates a commitment to
user privacy, fostering trust and confidence in the messaging platform.

By leveraging onion routing and multi-hop encryption, privacy-focused apps can provide users with an
unparalleled level of security. The Internet was once a place of free and anonymous communication—
it’s time to reclaim that right with nextgen technology built for privacy.

About the Author

Kee Jefferys is Co-Founder of Session—an end-to-end open-source, privacy-
focused encrypted messaging app that prioritizes anonymity, security, and
decentralization while maintaining the familiar features of mainstream
messaging applications but prohibiting sensitive metadata collection that
others allow. It’s designed for people who want privacy and freedom from any
forms of surveillance. He can be reached at https://getsession.org.

112