20:37:46 where can we read about this? and what effect any changes with FCMP++ tx's will have on the anonymity set? will it e.g. still be possible to see what type of user is behind a tx based on the tx size? > <@articmine> Yes FCMP++ transactions are 4x the size 21:01:56 > what effect any changes with FCMP++ tx's will have on the anonymity set? 21:01:56 decoys are now equivalent to eligible past outputs 21:30:57 > will it e.g. still be possible to see what type of user is behind a tx based on the tx size? 21:30:57 Not unless they put something non-standard in tx_extra or use a non-standard fee algorithm. Unless using non-standard tx construction code, the Carrot/FCMP++ tx size is solely a function of the number of inputs and number of outputs, plus a bit of wiggle room for different varints 21:31:50 It's also a function of the number of layers in the current FCMP tree, but that will be the same for all users 21:33:27 Actually, another fingerprint is the "reference block" of the FCMP tree. wallet2 will use the newest version of the tree available with 10 blocks of confirmation to do the FCMP membership proofs on. However, if you reference a very old block, or wait a long time to publish the transaction, external observers can see that the membership proofs are old 21:34:09 It doesn't leak the true spend, but shrinks the anonymity set to the total set of usable blockchain outputs at an earlier date 21:34:31 If you do it consistently, it can be a probabilistic fingerprint of your activity 21:35:11 The solution is write better code which does membership proofs right before broadcasting. In FCMP++ you can sign years in advance and do the membership proofs later with needing the spend key 21:36:13 You could pre-emptively sign a FCMP++ mainnet tx now, and wait to do membership proofs until the hard fork activates