Ok, one thing I realized is that in order for escrow agents to get paid, the price of the transaction must be known to them. That's fine. The product could still be hidden. And there's no reason this market would have to be for drugs only, so there's always plausible deniability. Then there's the issue of sellers deciding to trade based on buyer stats. I think this can be solved with multiple keys, like Tor relays use. Each buyer can keep a long term "identity" key and use "ephemeral" keys for each transaction. The ephemeral keys are cryptographically related to the identity key. If a seller requests to see a buyer's stats, he reveals the identity key, and the seller can interrogate the database to find other transactions signed by keys related to that key (this could be done automatically by the software). And since the price is public, they could compute # of transactions and total spent (same stats you get on SR today). Alternatively, buyers can maintain more privacy by refusing to reveal their identity keys and only buying from sellers who don't request it. At least it would be a choice. Also, transactions that are handled by escrow agents and that result in a resolution could be marked in a special way, so sellers could get stats on that too. Just thinking out loud here.