A few quick comments:
Adam Back wrote:
> Ian's double blind protocol is that the shop choses it's own blinding
> value b1, and then the user choses his own blinding value b2, the bank
> signs, payer unblinds, the payee unblinds, and now the payee can't be
> traced by the payer and bank.
This in fact is not Ian's proposal, it is due to Chaum himself and
is described with tons of other variations in a 1989 paper of his.
> card. Then the black mailer can physically destroy the street persons
> card, removing all possibility of the bank further tracing the money.
As you know, my primary concern is about purely digital extortion where
no physical link between payer and payee is ever involved. Anything one
could do in the design to make sure the extortioner needs at some point
to establish a physical presence of delivery channel is a Good Thing,
and removes my primary concern.
S t e f a n
