Check out the mixmaster anonymous remailers:
What if I don't trust server X to really be doing that?
What if the government contacted owner of server X and altered the software not to do that?
The system I am designing keeps anonymity without any need to trust the server. Hence the name. Don't trust anyone.