Okay yeah, that point is dumb, but what about the other issues raised?
Discussion
a "pubkey" is published to the chain and, if it appears in the future, its a possible spend.
theres no way to tell if it is a real spend or not, unless you have access to the sending wallet.
it is prudent to ensure an Adversary that may be actively surveiling you is not able to access the wallet that sent you the output.
this is important to understand when using #monero.
So you're saying you need to trust the person paying you to not be surveiling you?
no.
I'm saying the person paying you knows there's a "true" output on the chain and which one it is.
because they spent it to your key.
but if the output appears again on the chain they have no way of knowing if its a true spend of not.
so no surveillance happens.
but they can look at it and wonder about it. it is greater than zero information
maybe they're Chainanalysis and they have other data to correlate.
ideally we would reveal zero information right? the plan is to move to a system than reveals much less about the payee.
but this is just blockchain stuff, none of it is news.
Gotcha. So LN is strictly better in that regard with the possibility of a prism, or trampoline routing.
What about the other points STN raised? This is the only one I wasn't interested in talking about and the only point both of you replied to.
which "other issues" are you talking about?
the OP just seems to be about "cryptographic link to pubkey" and the implications...?
I don't think it is dumb. Why should the sender know what amount the recipient received? Why is that any of his business? What if the sender wants to keep half of it and forward the rest to someone else, prism-style?
Should the sender know that he sent $20 for the latest album but the merchant only got $10 of it, and the rest went to the artist and the producer, etc? I don't think so; it's none of the sender's business, the only thing he should know is that he sent $10 and the recipient gave him his product. He should not know how much the recipient received.
On lightning, thanks to multipath payments, the sender does not know how much the recipient received. On monero, he does. Monero is bad for recipient privacy in this respect and lightning does better.