[miloignis]

Matthew Green talks about this in his blog on the subject: https://blog.cryptographyengineering.com/2026/03/02/anonymou...

The two methods that seem feasible are making it hard to copy (putting it in the secure element in your phone, for example, which I don't love) or doing tokens that can only be used a limited number of times per day, like in : https://eprint.iacr.org/2006/454

[angry_octet]

If it's a rolling cert with rate limits I think that solves the problem, particularly if access to the client cert allows the client to make a financial transaction, e.g. of $100. So you wouldn't share the client cert with randoms because they would just take your $100 and you'd be blocked.

Finally, a way to use blockchain for good.

[angry_octet]

This scheme does coincidentally introduce the ability to pay for things anonymously using porno tokens, part of a government mandated crypto currency.

[tardedmeme]

So your bank says sorry, only 3 porns a day for you?

[angry_octet]

Where did you read that? Not in my post.

[tardedmeme]

What rate limit would you use?

[angry_octet]

Maybe 256 authentications a day.

[tardedmeme]

So only 256 porns a day for you. If you access a 257th porn site, your bank will know about it!