Partition attack on client knowledge (1) Adversary can distinguish between clients that use static node lists and clients that frequently update from the directory servers. Fix: Clients must all use the same algorithm for updating from the directory servers. Directory servers must be part of the spec!