rfkill on Nostr: The blinded signatures protect you from this issue: * Alice gets a coin from the mint ...
The blinded signatures protect you from this issue:
* Alice gets a coin from the mint and gives it to Bob
* Bob redeems it
* The mint now knows that the coin Bob redeemed is the same one that was given to Alice.
With blinded signatures, the mint only knows that the coin was minted and given to someone, but not to whom. Coins are fixed sizes, so your anonymity set is the number of people who have coins of the same size.
Of course there are probably tons of heuristics you could use to guess who sent coins to whom, which get harder the more users are using the mint.
* Alice gets a coin from the mint and gives it to Bob
* Bob redeems it
* The mint now knows that the coin Bob redeemed is the same one that was given to Alice.
With blinded signatures, the mint only knows that the coin was minted and given to someone, but not to whom. Coins are fixed sizes, so your anonymity set is the number of people who have coins of the same size.
Of course there are probably tons of heuristics you could use to guess who sent coins to whom, which get harder the more users are using the mint.