Alasdair on Nostr: Im sure there's a solution to this. It's possible you could do a kind of encryption, ...

Im sure there's a solution to this.

It's possible you could do a kind of encryption, so that when a users pubkey is shared with an aggregater, the aggregater doesn't know what public key is being requested.

You could encrypt the public key with the public key.

Then, when the aggregater asks the relays if they have the public key, they can only decrypt the encrypted pubkey if they have it.

This keeps the aggregators from knowing who is who, and forces the relays to be honest at the same time.