Oddbean new post about | logout
 ok, next question, so when it issues a token, does it do this on the prompt of a spender or does it do this independently and issue it to a spender upon the amount

because that IP address is a trace, as is the spender who can verify spending it, how is this handled? 
 the amounts can definitely be correlated, is my point, i buy 2000 sats precisely, and then anyone who redeems 2000 sats could be my counterparty? no? 
 That’s why there is fixed amounts (imagine notes / coins) and the lower the amount you choose the better your anon set is 
 so, i correctly understood it... the mint can track the size of the token to the input and output IP addresses

that is kinda important information for users of these things, isn't it?

it means you can't have anon ecash without having a tor proxy or similar 
 i get it that you can mitigate some of that with breaking the spend into pieces but it's still pretty strong metadata 
 Thanks to Multi Mint Payments you can not only split the token across multiple amounts, but also multiple custodians reducing metadata leaks even further. 
 well, i am hearing this idea for the first time

although i had this idea of non-splittable UTXOs about 5 years ago 
 Great conversation 
 The mint only creates tokens when prompted for. The token receiver has to provide a blinded message to “receive” the token on in order to make it work.

That does indeed mean that a mint can use metadata to trace. However that can be mitigated by privacy enhancing tools like Tor or a simple VPN.