I know there have been past discussions about their identities, which as far as I know are still unknown? If that's still the case, there's something that has been "bothering" me, but I just never bothered asking what you think about it. So, they are anonymous. But, their software is digitally signed for Truecrypt Foundation. If the Certificate Authority did a great job knowing who requested the certificate, then wouldn't it mean that their identities are known? Otherwise, it would mean either the CA didn't do a proper job (surprise surprise) or... something else happened? Another thing, their certificate seems to have expired in 09-11-2012 (day-month-year).