FYI there is a version 3 of bip47 (which Ranvier published somewhere else
[0]). It already gets them down to a marginal 64 bytes, with a small
privacy drawback.
The transaction from A can be double used as both a notification to Bob and
a payment to Bob. The notification output is multisig OP [Key
This discussion took place at Pizza Day Prague 2022[0] after a brief
discussion on Silent Payments[1]. The main points have been summarized
below.
The discussion was mainly between Alekos Filini, Martin Habovštiak, and
myself, as well as Daniela Brozzoni, Eric Sirion, Pavol Rusnak, Salvatore
Ingal