Unfortunately, and despite a lot of effort towards achieving it over several years actually, a secure forum system created by/for and funded by people from the drug scene is something that will probably never exist. Two people who were paid to program it fucked off and accomplished nothing. Additionally, despite a lot of effort towards design, it is pretty apparent that professional grade security designs must come from true professionals and not security hobbyists or illegal forum security Gurus (even the best ) ... (not mentioning Guru, who may be a professional cryptographer for all I know). I am not convinced that anyone in the drug scene has the skills required to make such designs, myself included, and any attempts to do so may very well end up being counter productive and giving a false sense of security when in fact they could harm security. Furthermore, it is not at all smart to have security software made by illegal groups specifically for protecting illegal activity from law enforcement, merely using such software would cast strong suspicion on any users. Also, only criminals will audit it, and as I said before I am not convinced that the drug scene has the talent required to audit or create such a product in the first place, multiple attempts have failed and a lot of money and time has been wasted. Also, only criminals will use it and that is simply not secure, especially in contexts where security directly correlates with crowd sizes and diversity of crowd sizes. However I do have some good news. I have been closely following developments of a fairly similar in goal although substantially different in implementation and design and entirely unrelated in association project, and it is nearing completion of the first Beta. It will not be very well suited for a very large forum like SR, because the security comes with a large performance price and this in turn limits the amount of people who can receive a single outgoing message to approx one thousand. Unfortunately, the more messages a person sends through the system the less the security guarantees can be, so simply scaling the number of outgoing messages for every 1,000 members will not be the best idea and sending 20 copies of every message to support a 20,000 member forum will result in substantially worse security versus restricting your group sizes (really better thought of as "message recipient size" since the concept of a group is entirely defined by the sender of a message) to 1,000 members. I have been spending a *very* large amount of my time learning the language this is being written in so that I can audit the code, and I believe I have achieved proficiency enough to properly assess the correctness and security of the implementation of the algorithms used, as well as the over all design (which is in fact a composite of various algorithms from various academic papers written by true security experts) . I think the end result will at the very least be a much more secure and anonymous alternative to GPG, Tor (although it still uses Tor, it adds mixing on top of it) and E-mail / private messages, with a substantially lower learning curve required to make use of it as compared to GPG (more similar to sending a PM on a forum, or using a forum, with the crypto and anonymity stuff taken care of in the background outside of user awareness). it is also well suited for forumesque structured group communications, for groups consisting of one thousand members or less. It does technically support larger groupings, although it rapidly and linearly-per-extra-thousand-recipients becomes less suitable for secure/anonymous group communications after a message recipient size of 1,000 is reached. I expect a beta as well as the entire source code and some free to use servers running the server component will be publicly available within two months, the message forwarding, mixing, a provably secure cryptographic packet format, other base encryption systems and a lot of other required components are finished (I have gone over it and it looks fine to me, although earlier prototypes had poor code quality) and now the developers are working on message retrieval, which requires the implementation of a private information retrieval system. After that is accomplished the system will be ready for Beta, although of course it will be unwise to use it until it is audited by as many people as possible, I will give it my seal of approval though (of course pending my review of the rest of the code whenever they are done with it, and as long as my confidence in my proficiency in the language / auditing abilities remains stable for some period of time, I have surprised myself two or three times but generally I am fast learner and spend over a dozen hours every day focusing on learning this ) It is also nice to note that it uses established cryptographic libraries and only wraps them or composites them together into larger systems, implementation of crypto primitives is best left to very very very skilled people and of course only after an implementation has been publicly audited by many professionals can it be trusted.