Delivery-date: Tue, 29 Oct 2024 09:52:34 -0700
Sender: bitcoindev@googlegroups.com
Received-SPF: pass (google.com: domain of pete@petertodd.org designates 103.168.172.159 as permitted sender) client-ip=103.168.172.159;
Feedback-ID: i525146e8:Fastmail
Date: Tue, 29 Oct 2024 16:43:11 +0000
From: Peter Todd <pete@petertodd.org>
To: /dev /fd0 <alicexbtong@gmail.com>
Cc: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Subject: Re: [bitcoindev] Redefine packages to discourage address reuse
Message-ID: <ZyEQn6UzyC9rQebc@petertodd.org>
References: <b383aad2-1abc-4b82-9851-1750b1b52f12n@googlegroups.com>
 <ZxkJyPVhk2uQLPOl@petertodd.org>
 <d78f0253-b09a-4718-ba4f-805c1b25a036n@googlegroups.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="lDbtw0Exv5g7hJNR"
Content-Disposition: inline
In-Reply-To: <d78f0253-b09a-4718-ba4f-805c1b25a036n@googlegroups.com>
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com


--lDbtw0Exv5g7hJNR
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline

On Wed, Oct 23, 2024 at 08:43:50PM -0700, /dev /fd0 wrote:
> Hi Peter,
> 
> > This kind of idea has been proposed multiple times and rejected.
> 
> This is the first time packages are used in bitcoin. My proposal is limited 
> to packages.
> 
> > In this particular case, an especially bad problem with it is there are
> > probably L2 protocols that actually need to reuse addresses in certain
> > circumstances. 
> 
> Can you share an example?

For example in Lightning you can do closes to arbitrary addresses. An
adversary could pick an address that they know you will use in a package
to cause package propagation to fail, effectively resulting in a form of
transaction pinning.

There's no reason to add this complexity for essentially zero gain.

> Packages will be used with covenants, inscriptions etc. apart from L2 
> protocols and I think there would be lot of address-reuse which can be 
> prevented by redefining the packages early.

Packages tell chainalysis services that the transactions are related and
probably created by the same person anyway. Avoiding address reuse in
them doesn't improve privacy meaningfully.

-- 
https://petertodd.org 'peter'[:-1]@petertodd.org

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/ZyEQn6UzyC9rQebc%40petertodd.org.

--lDbtw0Exv5g7hJNR
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=tJET
-----END PGP SIGNATURE-----

--lDbtw0Exv5g7hJNR--