So we have an indistinguishability definition that shows a malicious server can’t learn what you’re looking for. But says nothing I can see about the server changing and customizing the database to specific users.

— Matthew Green (@matthew_d_green) August 5, 2021