From lloyd.fourn at gmail.com  Fri Dec 18 00:43:08 2020
From: lloyd.fourn at gmail.com (Lloyd Fournier)
Date: Fri, 18 Dec 2020 11:43:08 +1100
Subject: [Lightning-dev] Covert channel recovery with Oblivious
	Signatures
In-Reply-To: <CAH5Bsr0i78_TNS-X4YZsVD-3+arB+eWECj06bg82jc3DLmbXKw@mail.gmail.com>
References: <CAH5Bsr1dmtKrJNpC5ZzcZChsPiGiaDi7CkcOp8hN3PYtQRRhfw@mail.gmail.com>
 <GMjoLiJYyMwSBNdfiyfChsWybEYH05SKpmcjKsTNG1qXJyUWbcMJ_Z3orrajvvF3BvZYK6ILM6EJXkPUzXBZ-r7gDQqOT7Z3f8wKJBd67a8=@protonmail.com>
 <CAH5Bsr0pU4NBTRo1O7B_r20KBs6R--UNtPUiYtUHZnYYYqr=9Q@mail.gmail.com>
 <i0wgenzxXFxdTQta4dLmpiziNMiGVsYBgKBOxnAp9nPKe_-zoZhI_wpfBhlncBxH6hw7dwR9rFDkA4kRXjG06Q2yA_KyLN1DEjWtRLYFm1E=@protonmail.com>
 <CAH5Bsr0i78_TNS-X4YZsVD-3+arB+eWECj06bg82jc3DLmbXKw@mail.gmail.com>
Message-ID: <CAH5Bsr1FtUhAmM96QSFoM_UVGiWw3G9nd+fmLMPZ2939sqOVBw@mail.gmail.com>

> I suspect part of the proof-of-discrete-log-equivalance can be gated as
well by a ZKCP on payment point+scalar the proof is provided only on
payment.
> The selling node operator does not even need to reveal `z`.

Actually no -- the fact that you were able to create a secure conditional
payment for the proof would always prove the proof existed.
You wouldn't need to pay for the proof then!

LL
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20201218/279bb4a7/attachment.html>