Lee Tien <tien@well.com> writes:

[...] Is payee anonymity technically possible? Under what conditions? [...]

It's not too hard: The payee forwards a blinded, non-signed coin to the payer. The payer has the bank sign this, and then returns it to the payee who strips out the blinding factor. I think this is discussed in Schneier. Leonard