[Lightning-dev] Payment presentation strawmen.

[Ryan Grant]

On Sat, Sep 10, 2016 at 4:36 PM, Christian Decker
<decker.christian at gmail.com> wrote:
> At least for the implementation using the r-hash to condition the
> release of funds there is nothing special about splitting a
> payment. As long as the recipient knows the total amount it should be
> receiving it can delay the release of the secret until it is
> guaranteed all funds. Collating the partial payments is done with the
> r-hash. I'm pretty sure that the private key release would also work
> the same way.

I understand how to collect partial payments on one channel this way, but
my reading was that the same r-hash cannot be used safely across
multiple channels.  Once one channel completes, exposure of the r-hash
to a colluding intermediary in the other channel could allow pulling
funds before sending them onward.