<oembed><type>rich</type><version>1.0</version><author_name>npub1xauxlsk47g5nrj205uz9vp9l4s72s7z2dwlwenw2r573mjsnvxnqcslhw9</author_name><author_url>https://nostr.ae/npub1xauxlsk47g5nrj205uz9vp9l4s72s7z2dwlwenw2r573mjsnvxnqcslhw9</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2017-10-01&#xA;📝 Original message:Just a simple suggestion since the signature format is changed. Can this be&#xA;designed so that possible future hard forks can simply change 1 constant in&#xA;the code and turn on cross chain replay protection?&#xA;&#xA;On Sun, Oct 1, 2017 at 1:05 PM Mark Friedenbach via bitcoin-dev &lt;&#xA;bitcoin-dev at lists.linuxfoundation.org&gt; wrote:&#xA;&#xA;&gt; Clean stack should be eliminated for other possible future uses, the most&#xA;&gt; obvious of which is recursive tail-call for general computation capability.&#xA;&gt; I’m not arguing for that at this time, just arguing that we shouldn’t&#xA;&gt; prematurely cut off an easy implementation of such should we want to. Clean&#xA;&gt; stack must still exist as policy for future soft-fork safety, but being a&#xA;&gt; consensus requirement was only to avoid witness malleability, which&#xA;&gt; committing to the size of the witness also accomplishes.&#xA;&gt;&#xA;&gt; Committing to the number of witness elements is fully sufficient, and&#xA;&gt; using the number of elements avoids problems of not knowing the actual size&#xA;&gt; in bytes at the time of signing, e.g. because the witness contains a merkle&#xA;&gt; proof generated by another party from an unbalanced tree, and unbalanced&#xA;&gt; trees are expected to be common (so that elements can be placed higher in&#xA;&gt; the tree in accordance with their higher expected probability of usage).&#xA;&gt; Other future extensions might also have variable-length proofs.&#xA;&gt;&#xA;&gt; &gt; On Sep 30, 2017, at 7:47 PM, Luke Dashjr &lt;luke at dashjr.org&gt; wrote:&#xA;&gt; &gt;&#xA;&gt; &gt; Should it perhaps commit to the length of the serialised witness data&#xA;&gt; instead&#xA;&gt; &gt; or additionally? Now that signatures are no longer variable-length,&#xA;&gt; that&#39;d be&#xA;&gt; &gt; possible...&#xA;&gt; &gt;&#xA;&gt; &gt; As far as tail-call needs are concerned, CLEANSTACK wouldn&#39;t have been&#xA;&gt; checked&#xA;&gt; &gt; until AFTER the tail-call in the first draft. But I suppose eliminating&#xA;&gt; it for&#xA;&gt; &gt; other possible future purposes is still useful.&#xA;&gt; &gt;&#xA;&gt; &gt; Luke&#xA;&gt;&#xA;&gt; _______________________________________________&#xA;&gt; bitcoin-dev mailing list&#xA;&gt; bitcoin-dev at lists.linuxfoundation.org&#xA;&gt; https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev&#xA;&gt;&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20171001/4e1497ee/attachment-0001.html&gt;</html></oembed>