From jb55 at jb55.com  Wed Sep  6 15:42:30 2023
From: jb55 at jb55.com (William Casarin)
Date: Wed, 6 Sep 2023 08:42:30 -0700
Subject: [Lightning-dev] Remotely control your lightning node from your
 favorite HSM
In-Reply-To: <CACdvm3Pgc6Q8hA62YwB6S0bXxjerq+JG3Z-O5Uavp5JjO7rGLg@mail.gmail.com>
References: <CACdvm3PKzqMURAQbHM_oc+8B1AYg__nqZHSZ2w3JuAnee3YWyA@mail.gmail.com>
 <hx-Um3uXsaH2iJjoAyCdNBuuCPHd9RfKbrJLzINVW69hfqmGtboliyJMOvC161ok4fzk3SV5jcgcOE9rDwVxYwI_LqsMLYGnqG7NuL91eJA=@protonmail.com>
 <CACdvm3Pgc6Q8hA62YwB6S0bXxjerq+JG3Z-O5Uavp5JjO7rGLg@mail.gmail.com>
Message-ID: <eug4wwdgxo4pyxhn7c2nll6edio3m4sm5f2xg2jdsd6dm5ci3q@te4htkfv6oau>

On Wed, Sep 06, 2023 at 03:32:50AM +0200, Bastien TEINTURIER wrote:
>Hey Zman,
>
>I saw the announcement about the commando plugin, and it was actually
>one of the reasons I wanted to write up what I had in mind, because
>while commando also uses a lightning connection to send commands to a
>lightning node, it was missing what in my opinion is the most important
>part: having all of Bolt 8 handled by the HSM and validating commands
>using a trusted display.

What is wrong with runes/macaroons for validating and authenticating
commands? I can't imagine validating every RPC request with a hardware
device and trusted display, unless you have some specific use case in
mind.

	Will