Date: Sat, 18 Dec 2021 03:49:15 +0000
To: Jeremy <jlrubin@mit.edu>
From: ZmnSCPxj <ZmnSCPxj@protonmail.com>
Reply-To: ZmnSCPxj <ZmnSCPxj@protonmail.com>
Message-ID: <z3doYwv_p3_hnl2UZW9hC5_RYclAp4bu44ZdkNSZsaP4JtdvIMz2zOqrdoDiKKADe0zV1wHZ-1ZfEQ8kyLnACkejJplTrWRCh_kEy11VtN4=@protonmail.com>
In-Reply-To: <CAD5xwhjDBaQvP89eh4LhYZ3E+8RQycafr9mxeOrFbivd3e=LOw@mail.gmail.com>
References: <CAD5xwhjDBD38Xt=p=AW7XU3OCh0_9nb=-7neXuLcd-VAXJBE-Q@mail.gmail.com>
 <BPaAFvgTqtCsxcAr1W_jlvWkHOaRi41GCfdHsblFGmqBVKR20qC18xk89Wh28Cmaf2YGUlN_N9_g9S_ij3bZbhsD_0qaDMcvqV1GdScVoTs=@protonmail.com>
 <CAD5xwhjDBaQvP89eh4LhYZ3E+8RQycafr9mxeOrFbivd3e=LOw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] [Bitcoin Advent Calendar] Oracles, Bonds,
	and Attestation Chains
Precedence: list

Good morning Jeremy,


> Another interesting point: if you use a musig key for your staking key th=
at is musig(a,b,c) you can sign with a until you equivocate once, then swit=
ch to b, then c. Three strikes and you're out! IDK what that could be used =
for.

You could say "oops, I made a mistake, can I correct it by equivocating jus=
t this time?".
Three strikes and you are out.

> Lastly, while you can't punish lying, you could say "only the stakers who=
 sign with the majority get allocated reward tokens for that slot". So you =
could equivocate to switch and get tokens, but you'd burn your collateral f=
or them. But this does make an incentive for the stakers to try to sign the=
 "correct" statement in line with peers.

Note the quote marks around "correct" --- the majority of peers could be co=
nspiring to lie, too.
Conspiracy theory time.....

Regards,
ZmnSCPxj