<oembed><type>rich</type><version>1.0</version><author_name>npub1mlpmsc5sm93tw2fp2dhhuwmxcqm59wz6hjg5g3afq5rucfll3f9sh4yf8d</author_name><author_url>https://nostr.ae/npub1mlpmsc5sm93tw2fp2dhhuwmxcqm59wz6hjg5g3afq5rucfll3f9sh4yf8d</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2017-11-09&#xA;📝 Original message:OK, I see.  On the whole this is the best replay protection solution I&#39;ve&#xA;seen.  In particular, I hope developers of Bech32 and other new address&#xA;formats will take a close look at incorporating a fork ID this way.&#xA;&#xA;As I understand you, a private key in cold storage would (of course) remain&#xA;valid across HFs, but an *address* would be valid only for the nForkId it&#xA;was generated for.  There may be cold-storage-type cases where it&#39;s&#xA;important for an address to be valid across all chains, ie, to&#xA;intentionally allow replay?  But I guess this could just be a special&#xA;nForkId value, say -1?&#xA;&#xA;&#xA;On Nov 8, 2017 9:45 AM, &#34;Mats Jerratsch&#34; &lt;mats at blockchain.com&gt; wrote:&#xA;&#xA;&gt; Hey Jacob!&#xA;&gt;&#xA;&gt; &gt; Take the specific and common case of non-upgraded wallet software.&#xA;&gt; Suppose a HF happens, and becomes the network used by 90% of users.  Will&#xA;&gt; old wallets still default to the old nForkId (10% legacy chain)?  If so,&#xA;&gt; I&#39;d expect a lot of accidental mis-sends on that chain.&#xA;&gt;&#xA;&gt; With this proposal implemented, a &#39;mis-send&#39; is fundamentally impossible.&#xA;&gt; The address contains the identifier of the token that should be sent.&#xA;&gt;&#xA;&gt; If anything, it&#39;s possible to &#39;mis-receive&#39;.&#xA;&gt; That is, the receiving wallet was not aware of a newer chain, and the&#xA;&gt; receiver actually wanted to receive the newer token, but instead his wallet&#xA;&gt; created an address for the old token. It is the responsibility of the&#xA;&gt; receiver to write a correct invoice. This is the case everywhere else in&#xA;&gt; the world too, so this seems like a reasonable trade-off.&#xA;&gt;&#xA;&gt; I would even argue that this should hold in a legal case, where the&#xA;&gt; receiver cannot claim that he was expecting a payment in another token&#xA;&gt; (contrary to how it is today, like when users send BTC to a BCH address,&#xA;&gt; losing their funds with potentially no legal right for reimbursement). If I&#xA;&gt; sent someone an invoice over 100€, I cannot later proclaim that I actually&#xA;&gt; expected $100.&#xA;&gt;&#xA;&gt; With this proposal, wallets are finally able to distinguish between&#xA;&gt; different tokens. With this ability, I expect to see different&#xA;&gt; implementations, some wallets which advertise staying conservative,&#xA;&gt; following a strict ruleset, and other wallets being more experimental,&#xA;&gt; following hashing rate or other metrics.&#xA;&gt;&#xA;&gt;&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20171109/b20d9108/attachment.html&gt;</html></oembed>