@gonun13 @soderling Well, then the government gives me a token for something. First, they know I requested a token at this time (which is also a privacy problem, but not that big). I give that token to the site I want to use, that is okay still. But then the government asks the site owner to give them all the users with all their tokens. Now the government can match the users with real people based on the tokens they gave out.