Reviewer

The reviewer's comments show a misunderstanding concerning what is achieved by our protocol Differential privacy is not useful in this scenario. DP cannot be used to single out individual "bad" entries. It is misleading to directly compare DP with SMC. In many ways, they complement each other. We have provided a fairly general solution to an important problem: text classification.