Oddbean new post about | logout
 HMAC sacrifices the bearer nature of eCash, since you can no longer verify that the mint signed it