CMV: XMR + view-keys = ZEC

@GamingResearchLab
Yeah, like I said, you wouldn't get it.

@bulletbill22

You cannot continually monitor the balances, expenditures, and receipts of wallets using the existing features.

Why does this hypothetical Monero-ending boogeyman draw the line in the sand in asking for key images? It knows exactly which outputs to request key images for, and can apparently control everything you do... Why doesn't it ask for key images? What is so magical in this hypothetical threat model about key images? Please enlighten me.

OVKs are useful for fetching key image information without interaction, which is what makes the UX for cold wallets and multisig wallets so much better. But this boogeyman operates with interaction (it asks all users for IVKs), then monitors them. And apparently everyone in this scenario also never makes a new wallet, so what exactly is preventing the boogyman from asking for key images?

This does nothing to address that the erosion of fungibility between private and transparent coins will lead to private coins being nonfunctional. You will not be able to use Monero to privately pay for goods and services.

Incorrect. Please lookup information about the FCMP++ upgrade. This whole hullabaloo is a non-issue for people who don't willingly give up their private key material.

@Nebuchadnezzar_II

Re: dual clean/unclean fungability issues. I doubt that a split in price comes between "clean" and "unclean" units of a by-default private asset. Source: cash. Technically, you can trace cash because the bills have serial numbers on them. From a technical standpoint, you could trace every transaction that the serial number has been seen in under a centralized registry. You could even refuse to accept bills with serial numbers which are not "clean", as determined by some set of arbitrary tracking rules. But no one uses cash this way, and no merchants enforce anything like this. Differentiating between "clean" and "unclean" histories on Monero would be even harder if even a single hop in a coin's history didn't adhere to the tracking program. Monero coins do not have serial numbers attached to them. When you receive a 1 XMR e-note under FCMP++, if not every single tx input for that e-note, and each of the creating tx's inputs are proved, recursively, then the entire history of that coin is erased irrevocably. I mean, people can try to maintain a dual "clean"/"unclean" system, but I think that it would be pretty leaky in practice.

@jeffro256 well I suppose we'll have to see what happens.

The key difference really is that OVK facilitates tracking a pool of compliant wallets without ongoing interaction between tracking and tracked.

I really really don't understand the ux argument you make for OVK though. You only have to scan a couple of qr codes to sync your cold wallet, which is a basic workflow of cold storage anyway.