@perlman yes, there are lot of things that work just fine. And then few things that were missed. For example the link proof can be linked with the sender via the signature done using the publicly known destination identity key. Or the path discovery breadcrumbs. And the statistical analysis of interface traffic that can link the various identities together. Network privacy is simply hard.