What's Not Possible?
We can't ensure that all messages will arrive
- If you need reliable delivery, use TCP
We can't ensure that compromised collector won't delete inconvenient messages
- Could use hash-network or cryptographic audit log to protect against this
We can't ensure that sending device wasn't compromised