as far as i know, the only evidence they had that he was dread pirate roberts was a tenuous presence relationship. meaning they could see that dpr logged on when he appeared to be active and logged off when he appeared to be inactive, but that's about it. it's difficult to make your communication immune to snooping. it's next to impossible to avoid leaking all manner of metadata.
Denmark