MIME-Version: 1.0
In-Reply-To: <57B31EBC.1030806@jonasschnelli.ch>
References: <57B31EBC.1030806@jonasschnelli.ch>
From: Moral Agent <ethan.scruples@gmail.com>
Date: Mon, 22 Aug 2016 12:50:13 -0400
Message-ID: <CACiOHGycQKr3zETzhOfxzOFb2FgqOou_3bod66NuPWbf=4hhEQ@mail.gmail.com>
To: Jonas Schnelli <dev@jonasschnelli.ch>, 
	Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary=001a113fb59690f309053aabd707
Subject: Re: [bitcoin-dev] Hardware Wallet Standard
Precedence: list

--001a113fb59690f309053aabd707
Content-Type: text/plain; charset=UTF-8

It would be nice if the detached signer and the normal wallet could both
verify the correctness of generated addresses before you cause coins to be
sent there.

e.g. the hardware wallet could give its master public key to Bitcoin Core
and you can thereafter generate your receiving addresses on Core, with the
option to have the HW wallet validate them.

One of my biggest fears about using any wallet is the "whoops, cosmic ray
flipped a bit while producing receiving address; SFYL!" possibility. For
high value cold storage, I always generate my addresses on two independent
machines using two different pieces of software. Am I nuts for doing that?

With the above scheme, you are pretty well protected from losing money if
your HW wallet is defective. You could still lose it if the HW wallet was
evil of course, but that strikes me as much more likely to be discovered
quickly.

--001a113fb59690f309053aabd707
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">It would be nice if the detached signer and the normal wal=
let could both verify the correctness of generated addresses before you cau=
se coins to be sent there.<div><br></div><div>e.g. the hardware wallet coul=
d give its master public key to Bitcoin Core and you can thereafter generat=
e your receiving addresses on Core, with the option to have the HW wallet v=
alidate them.</div><div><br></div><div>One of my biggest fears about using =
any wallet is the &quot;whoops, cosmic ray flipped a bit while producing re=
ceiving address; SFYL!&quot; possibility. For high value cold storage, I al=
ways generate my addresses on two independent machines using two different =
pieces of software. Am I nuts for doing that?</div><div class=3D"gmail_extr=
a"><br></div><div class=3D"gmail_extra">With the above scheme, you are pret=
ty well protected from losing money if your HW wallet is defective. You cou=
ld still lose it if the HW wallet was evil of course, but that strikes me a=
s much more likely to be discovered quickly.</div></div>

--001a113fb59690f309053aabd707--