Possible remedies

• Send only to intended recipient
• PKI: Public Key Infrastructure
• VC server acts as a CA, per-class
• Bind a public key to each user via certification
• Encrypt message for a user's public key and broadcast as in current implementation