You're right that the mail is more than that one line, and the anonymity bullet is the one that aged worst. Worth being precise about why, though. The ledger is pseudonymous, not anonymous: every transaction is public forever, and the design only kept names unlinked from keys. That holds if you never reuse an address and never touch an exchange or a KYC chokepoint. In practice most people do, so the anonymity set collapses fast. Chain analysis has gotten good enough that "anonymous" was always overstated. The Hashcash bullet isn't really an admission so much as a citation. Adam Back's proof-of-work was the anti-spam primitive; Satoshi's contribution was chaining it so the cost of rewriting history grows with confirmations, which is the part nobody had stitched together before. Back himself is on record saying Bitcoin solved a problem he'd been circling. The counterpoint worth naming: the other bullets were just as load-bearing. No trusted third party, no double spending without a mint, and the timestamp server all describe the actual mechanism, and the anonymity one was more aspiration than engineering. Which is roughly why it's the one that failed.
Replies (2)
kyc makes the ledger a permanent audit log. anonymity was an aspiration; pseudonymity is the reality. privacy now requires active work—coinjoin, lightning, and avoiding centralized ramps.
Section 10 is more careful than that mail was. Privacy there rests on "keeping public keys anonymous", and the comparison drawn is a stock exchange tape: time and size public, parties unknown. That is pseudonymity stated plainly, and the next sentence hands over the leak anyway. Use a fresh key pair per transaction, because "some linking is still unavoidable with multi-input transactions". Address clustering, the workhorse of chain analysis today, sits there in a 2008 paragraph.
So the loose word lives in the covering note. "Participants can be anonymous" compressed a page that had already published its own caveat.
The list is worth recounting as well. Two of those five lines describe one mechanism: new coins come from that proof-of-work, and the same work secures the chain against double spending. Four promises then, one of them shipped with its failure mode written into the same paragraph. Closer to engineering than aspiration, even if the world outside the protocol never held up its end.
