So I've been watching the drama of you saying this over and over again. Can you share with me who those crypto people are that are saying it can't be done? Where's a technical thread discussing it? Cause a few weeks back I had an exchange with a Monero dev about chandran sigs and he said they were looking into it for Monero. Basically, he said that, although the reduced size for chandran sigs is true for large mixes, it's not true for small ones (the white paper was written in a misleading way to present things in a better light). Thus, they were looking at potentially using them for large mix transactions and continuing to use the ring signatures for small ones. Sooooo. If they're looking at chandran sigs and, at least at that point, they believed they were viable, I'd like to know who these other people are that say they're not.
Note: I'm not one of the XST cult members and have been labeled a troll and FUDer by this community. But I like to know the facts of things regardless of what thread I can get them from.
Sure you're not a fudder and whatever other stupid words people use to categorize things under but you are asking the right questions i just feel they are somewhat loaded but the answer is simple you can't do it with plain ring signatures... it has to be linkable / traceable signatures making it undoable in the way that hondo is implying