A sender uses a double-write protocol to pass data to a recipient using a dead drop network architecture. The sender sends, to a dead drop domain, a data payload to store at the dead drop domain, and receives payload access information corresponding to a payload dead drop where the payload data is stored. The sender sends, to the dead drop domain, one or more instances of metadata including the payload access information to store at the dead drop domain, and receives metadata access information corresponding to one or more metadata dead drops where the metadata is stored. The sender provides the metadata access information to one or more recipients. A recipient uses the metadata access information to read the corresponding metadata dead drop. The recipient then uses the payload access information from the metadata to read the payload dead drop and receive the payload data.