We describe a design for a reputation system that increases the reliability and thus efficiency of remailer services. Our
reputation system uses a MIX-net in which MIXes give receipts for intermediate messages. Together with a set of witnesses,
these receipts allow senders to verify the correctness of each MIX and prove misbehavior to the witnesses.