[tgsovlerkhgsel]

Aren't the companies also expected to do revocation checking, essentially creating a record of who identified where, with a fig leaf of "pseudonymity" (that is one database join away from being worthless)?

[myrion]

The revocation checking is implemented in a way where the government doesn't know who you checked and you can even cache the information (if that's good enough for you) so they won't notice at all.

[tgsovlerkhgsel]

Either the spec changed since I last checked or I confused it with something else, you're right. They're basically using CRLs.

For unlinkability, I think the plan is to essentially issue single use IDs/"certificates", but it's not implemented in the Beta.