MIME-Version: 1.0
References: <CAJR7vkqjWs2PqLhS2P4LGFc5A5Sh3ZFMOnVPVS9S_8C9HHD=GQ@mail.gmail.com>
In-Reply-To: <CAJR7vkqjWs2PqLhS2P4LGFc5A5Sh3ZFMOnVPVS9S_8C9HHD=GQ@mail.gmail.com>
From: =?UTF-8?B?5pyo44OO5LiL44GY44KH44Gq?= <kinoshitajona@gmail.com>
Date: Fri, 4 Oct 2019 14:54:52 +0900
Message-ID: <CACvEmnH4Qcm3EDNBqQb1GPu0ct5R-JbbZGfUgdiGh_63OMbvgw@mail.gmail.com>
To: Jimmy Song via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="000000000000ddec5b05940f5750"
Subject: Re: [bitcoin-dev] PSBT global key for network
Precedence: list

--000000000000ddec5b05940f5750
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Jimmy,

The only time I could see this being a problem is in the case of a
fork-coin.
Otherwise the likelihood that two unrelated networks could have a tx with
an id that is identical are low.

Everything included in PSBT thus far is info for verifying something
helpful, and providing the information needed for signing and verifying
what will be signed.

Adding a network section will be the inverse of that. The info doesn't help
you verify anything, since I could lie about the network, and you will need
to go out and check the network is as the PSBT says it is anyways.
Network is also not needed for signing.

In fact, come to think of it, even if there was a fork-coin incident, even
if you were able to separate PSBTs via network info, it won't matter if
there's no replay protection anyways, so giving a false sense of security
in thinking "I have explicitly stated my network so I should be ok"
(developers will think this, I guarantee) is actually a security minus IMO.

Currently BitcoinJS only uses network parameters to allow for the use of
addresses in addOutput... but I'm starting to think we should remove it...
not sure...

Cheers,
Jon

2019=E5=B9=B410=E6=9C=884=E6=97=A5(=E9=87=91) 11:04 Jimmy Song via bitcoin-=
dev <
bitcoin-dev@lists.linuxfoundation.org>:

> Hey all,
>
> I wanted to propose a new key in the global context for BIP174,
> Partially-Signed Bitcoin Transactions.
>
> =3D Rationale
>
> Each signer should make sure that the inputs being referenced in the PSBT
> exist (with the exception of a Proof-of-Reserves input). In order to do
> this, it's critical to know which network the coins are on (mainnet or
> testnet). This could potentially be extended to other networks should the=
y
> want to use something like PSBT, much in the same way that HD keys from
> BIP0044 reserved 0' and 1' as coins for mainnet Bitcoin and testnet Bitco=
in
> respectively.
>
> =3D Proposal
>
> Add the key 0x03 for network in the global key-value store. Value is a
> variable integer with 0x00 indicating Bitcoin mainnet and 0x01 indicating
> Bitcoin testnet. Other coins that want to use the PSBT should use the coi=
n
> network number from SLIP-0044 with the high bit removed.
>
> ---------------------------
>
> Best,
>
> Jimmy
>
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>


--=20
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: http://openpgpjs.org
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3D=3D
=3D/vUJ
-----END PGP PUBLIC KEY BLOCK-----

--000000000000ddec5b05940f5750
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Jimmy,<div><br></div><div>The only time I could see thi=
s being a problem is in the case of a fork-coin.</div><div>Otherwise the li=
kelihood=C2=A0that two unrelated networks could have a tx with an id that i=
s identical are low.<br></div><div><br></div><div>Everything included in PS=
BT thus far is info for verifying something helpful, and providing the info=
rmation needed for signing and verifying what will be signed.</div><div><br=
></div><div>Adding a network section will be the inverse of that. The info =
doesn&#39;t help you verify anything, since I could lie about the network, =
and you will need to go out and check the network is as the PSBT says it is=
 anyways.</div><div>Network is also not needed for signing.<br><br>In fact,=
 come to think of it, even if there was a fork-coin incident, even if you w=
ere able to separate PSBTs via network info, it won&#39;t matter if there&#=
39;s no replay protection anyways, so giving a false sense of security in t=
hinking &quot;I have explicitly stated my network so I should be ok&quot; (=
developers will think this, I guarantee) is actually a security minus IMO.<=
/div><div><br></div><div>Currently BitcoinJS only uses network parameters t=
o allow for the use of addresses in addOutput... but I&#39;m starting to th=
ink we should remove it... not sure...</div><div><br></div><div>Cheers,</di=
v><div>Jon</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=
=3D"gmail_attr">2019=E5=B9=B410=E6=9C=884=E6=97=A5(=E9=87=91) 11:04 Jimmy S=
ong via bitcoin-dev &lt;<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation=
.org">bitcoin-dev@lists.linuxfoundation.org</a>&gt;:<br></div><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px soli=
d rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>Hey all,</div><d=
iv><br></div><div>I wanted to propose a new key in the global context for B=
IP174, Partially-Signed Bitcoin Transactions.</div><div><br></div><div>=3D =
Rationale</div><div><br></div><div>Each signer should make sure that the in=
puts being referenced in the PSBT exist (with the exception of a Proof-of-R=
eserves input). In order to do this, it&#39;s critical to know which networ=
k the coins are on (mainnet or testnet). This could potentially be extended=
 to other networks should they want to use something like PSBT, much in the=
 same way that HD keys from BIP0044 reserved 0&#39; and 1&#39; as coins for=
 mainnet Bitcoin and testnet Bitcoin respectively.</div><div><br></div><div=
>=3D Proposal</div><div><br></div><div>Add the key 0x03 for network in the =
global key-value store. Value is a variable integer with 0x00 indicating Bi=
tcoin mainnet and 0x01 indicating Bitcoin testnet. Other coins that want to=
 use the PSBT should use the coin network number from SLIP-0044 with the hi=
gh bit removed.</div><div><br></div><div>---------------------------</div><=
div><br></div><div>Best,</div><div><br></div><div>Jimmy<br></div><div><br><=
/div></div>
_______________________________________________<br>
bitcoin-dev mailing list<br>
<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D"_blank">=
bitcoin-dev@lists.linuxfoundation.org</a><br>
<a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev" =
rel=3D"noreferrer" target=3D"_blank">https://lists.linuxfoundation.org/mail=
man/listinfo/bitcoin-dev</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div>-----BEGIN PGP PUBLIC KEY =
BLOCK-----</div><div>Comment: <a href=3D"http://openpgpjs.org" target=3D"_b=
lank">http://openpgpjs.org</a></div><div><br></div><div>xsBNBFTmJ8oBB/9rd+7=
XLxZG/x/KnhkVK2WBG8ySx91fs+qQfHIK1JrakSV3</div><div>x6x0cK3XLClASLLDomm7Od3=
Q/fMFzdwCEqj6z60T8wgKxsjWYSGL3mq8ucdv</div><div>iBjC3wGauk5dQKtT7tkCFyQQbX/=
uMsBM4ccGBICoDmIJlwJIj7fAZVqGxGOM</div><div>bO1RhYb4dbQA2qxYP7wSsHJ6/ZNAXyE=
phOj6blUzdqO0exAbCOZWWF+E/1SC</div><div>EuKO4RmL7Imdep7uc2Qze1UpJCZx7ASHl2I=
Z4UD0G3Qr3pI6/jvNlaqCTa3U</div><div>3/YeJwEubFsd0AVy0zs809RcKKgX3W1q+hVDTeW=
inem9RiOG/vT+Eec/ABEB</div><div>AAHNI2tpbm9zaGl0YSA8a2lub3NoaXRham9uYUBnbWF=
pbC5jb20+wsByBBAB</div><div>CAAmBQJU5ifRBgsJCAcDAgkQRB9iZ30dlisEFQgCCgMWAgE=
CGwMCHgEAAC6Z</div><div>B/9otobf0ASHYdlUBeIPXdDopyjQhR2RiZGYaS0VZ5zzHYLDDMW=
6ZIYm5CjO</div><div>Fc09ETLGKFxH2RcCOK2dzwz+KRU4xqOrt/l5gyd50cFE1nOhUN9+/Xa=
Pgrou</div><div>WhyT9xLeGit7Xqhht93z2+VanTtJAG6lWbAZLIZAMGMuLX6sJDCO0GiO5zx=
a</div><div>02Q2D3kh5GL57A5+oVOna12JBRaIA5eBGKVCp3KToT/z48pxBe3WAmLo0zXr</d=
iv><div>hEgTSzssfb2zTwtB3Ogoedj+cU2bHJvJ8upS/jMr3TcdguySmxJlGpocVC/e</div><=
div>qxq12Njv+LiETOrD8atGmXCnA+nFNljBkz+l6ADl93jHzsBNBFTmJ9EBCACu</div><div>=
Qq9ZnP+aLU/Rt6clAfiHfTFBsJvLKsdIKeE6qHzsU1E7A7bGQKTtLEnhCCQE</div><div>W+OQ=
P+sgbOWowIdH9PpwLJ3Op+NhvLlMxRvbT36LwCmBL0yD7bMqxxmmVj8n</div><div>vlMMRSe4=
wDSIG19Oy7701imnHZPm/pnPlneg/Meu/UffpcDWYBbAFX8nrXPY</div><div>vkVULcI/qTcC=
xW/+S9fwoXjQhWHaiJJ6y3cYOSitN31W9zgcMvLwLX3JgDxE</div><div>flkwq/M+ZkfCYnS3=
GAPEt8GkVKy2eHtCJuNkGFlCAmKMX0yWzHRAkqOMN5KP</div><div>LFbkKY2GQl13ztWp82QY=
JZpj5af6dmyUosurn6AZABEBAAHCwF8EGAEIABMF</div><div>AlTmJ9QJEEQfYmd9HZYrAhsM=
AABKbgf/Ulu5JAk4fXgH0DtkMmdkFiKEFdkW</div><div>0Wkw7Vhd5eZ4NzeP9kOkD01OGweT=
9hqzwhfT2CNXCGxh4UnvEM1ZMFypIKdq</div><div>0XpLLJMrDOQO021UjAa56vHZPAVmAM01=
z5VzHJ7ekjgwrgMLmVkm0jWKEKaO</div><div>n/MW7CyphG7QcZ6cJX2f6uJcekBlZRw9TNYR=
nojMjkutlOVhYJ3J78nc/k0p</div><div>kcgV63GB6D7wHRF4TVe4xIBqKpbBhhN+ISwFN1z+=
gx3lfyRMSmiTSrGdKEQe</div><div>XSIQKG8XZQZUDhLNkqPS+7EMV1g7+lOfT4GhLL68dUXD=
a1e9YxGH6zkpVECw</div><div>Spe3vsHZr6CqFg=3D=3D</div><div>=3D/vUJ</div><div=
>-----END PGP PUBLIC KEY BLOCK-----</div></div></div>

--000000000000ddec5b05940f5750--