An intermediate computer for secure forwarding of messages in a telecommunication network, comprising: an intermediate computer configured to connect to a telecommunication network; the intermediate computer configured to be assigned with a first network address in the telecommunication network and to access a mapping between a unique identity and a network address of a second computer; the intermediate computer configured to receive from a first computer a secure message sent to the first network address having an encrypted data payload of a message and the unique identity of the second computer, the data payload encrypted with a cryptographic key derived from a key exchange protocol; the intermediate computer configured to read the unique identity from the secure message sent to the first network address, to use the unique identity to find the network address of the second computer from the mapping, and to securely forward the encrypted data payload to the network address of the second computer using a network address of the intermediate computer as a source address of a forwarded message containing the encrypted data payload wherein the intermediate computer does not have the cryptographic key to decrypt the encrypted data payload; the intermediate computer further configured to receive from the second computer a second secure message having an encrypted data payload of a message and a unique identity of the first computer, the data payload encrypted with a cryptographic key derived from the key exchange protocol; the intermediate computer configured to access a second mapping between the unique identity and the network address of the first computer to read the unique identity from the second secure message, to use the unique identity of the first computer to find the network address of the first computer from the mapping, and to securely forward the encrypted data payload of the second secure message to the network address of the first computer using a network address of the intermediate computer as a source address of a second forwarded message containing the encrypted data payload of the second secure message wherein the intermediate computer does not have the cryptographic key to decrypt the encrypted data payload. an intermediate computer configured to connect to a telecommunication network; the intermediate computer configured to be assigned with a first network address in the telecommunication network and to access a mapping between a unique identity and a network address of a second computer; the intermediate computer configured to receive from a first computer a secure message sent to the first network address having an encrypted data payload of a message and the unique identity of the second computer, the data payload encrypted with a cryptographic key derived from a key exchange protocol; the intermediate computer configured to read the unique identity from the secure message sent to the first network address, to use the unique identity to find the network address of the second computer from the mapping, and to securely forward the encrypted data payload to the network address of the second computer using a network address of the intermediate computer as a source address of a forwarded message containing the encrypted data payload wherein the intermediate computer does not have the cryptographic key to decrypt the encrypted data payload; the intermediate computer further configured to receive from the second computer a second secure message having an encrypted data payload of a message and a unique identity of the first computer, the data payload encrypted with a cryptographic key derived from the key exchange protocol; the intermediate computer configured to access a second mapping between the unique identity and the network address of the first computer to read the unique identity from the second secure message, to use the unique identity of the first computer to find the network address of the first computer from the mapping, and to securely forward the encrypted data payload of the second secure message to the network address of the first computer using a network address of the intermediate computer as a source address of a second forwarded message containing the encrypted data payload of the second secure message wherein the intermediate computer does not have the cryptographic key to decrypt the encrypted data payload.