<oembed><type>rich</type><version>1.0</version><author_name>npub1xqcwcttsyk0a64d63crrwsxp88pa42np37rw87hrfn4uku78g2aqltcnns</author_name><author_url>https://nostr.ae/npub1xqcwcttsyk0a64d63crrwsxp88pa42np37rw87hrfn4uku78g2aqltcnns</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2021-08-09&#xA;📝 Original message:&#xA;&gt; 5) should we ever do confidential transactions we can&#39;t prevent it without compromising&#xA;privacy / allowed transfers&#xA;&#xA;I wanted to mention the dubiousness of adding confidential transactions to&#xA;bitcoin. Because adding CT would eliminate the ability for users to audit&#xA;the supply of Bitcoin, I think its incredibly unlikely to ever happen. I&#39;m&#xA;in the camp that we shouldn&#39;t do anything that prevents people from&#xA;auditing the supply. I think that camp is probably pretty large. Regardless&#xA;of what I think should happen there, and even if CT were to eventually&#xA;happen in bitcoin, I don&#39;t think that future possibility is a good reason&#xA;to change the dust limit today.&#xA;&#xA;It seems like dust is a scalability problem regardless of whether we use&#xA;Utreexo eventually or not, tho an accumulator would help a ton. One idea&#xA;would be to destroy/delete dust at some point in the future. However, even&#xA;if we were to plan to do this, I still don&#39;t think the dust limit should be&#xA;removed. But the dust limit should probably be lowered a bit, given that&#xA;the 546 sats limit is about 7 cents and its very doable to send 1 sat/vbyte&#xA;transactions, so lowering it to 200 sats seems reasonable.&#xA;&#xA;&#xA;On Mon, Aug 9, 2021 at 6:24 AM Antoine Riard via bitcoin-dev &lt;&#xA;bitcoin-dev at lists.linuxfoundation.org&gt; wrote:&#xA;&#xA;&gt; I&#39;m pretty conservative about increasing the standard dust limit in any&#xA;&gt; way. This would convert a higher percentage of LN channels capacity into&#xA;&gt; dust, which is coming with a lowering of funds safety [0]. Of course, we&#xA;&gt; can adjust the LN security model around dust handling to mitigate the&#xA;&gt; safety risk in case of adversarial settings, but ultimately the standard&#xA;&gt; dust limit creates a  &#34;hard&#34; bound, and as such it introduces a trust&#xA;&gt; vector in the reliability of your peer to not goes&#xA;&gt; onchain with a commitment heavily-loaded with dust-HTLC you own.&#xA;&gt;&#xA;&gt; LN node operators might be willingly to compensate this &#34;dust&#34; trust&#xA;&gt; vector by relying on side-trust model, such as PKI to authenticate their&#xA;&gt; peers or API tokens (LSATs, PoW tokens), probably not free from&#xA;&gt; consequences for the &#34;openness&#34; of the LN topology...&#xA;&gt;&#xA;&gt; Further, I think any authoritative setting of the dust limit presents the&#xA;&gt; risk of becoming ill-adjusted  w.r.t to market realities after a few months&#xA;&gt; or years, and would need periodic reevaluations. Those reevaluations, if&#xA;&gt; not automated, would become a vector of endless dramas and bikeshedding as&#xA;&gt; the L2s ecosystems grow bigger...&#xA;&gt;&#xA;&gt; Note, this would also constrain the design space of newer fee schemes.&#xA;&gt; Such as negotiated-with-mining-pool and discounted consolidation during low&#xA;&gt; feerate periods deployed by such producers of low-value outputs.&#xA;&gt; `&#xA;&gt; Moreover as an operational point, if we proceed to such an increase on the&#xA;&gt; base-layer, e.g to 20 sat/vb, we&#39;re going to severely damage the&#xA;&gt; propagation of any LN transaction, where a commitment transaction is built&#xA;&gt; with less than 20 sat/vb outputs. Of course, core&#39;s policy deployment on&#xA;&gt; the base layer is gradual, but we should first give a time window for the&#xA;&gt; LN ecosystem to upgrade and as of today we&#39;re still devoid of the mechanism&#xA;&gt; to do it cleanly and asynchronously (e.g dynamic upgrade or quiescence&#xA;&gt; protocol [1]).&#xA;&gt;&#xA;&gt; That said, as raised by other commentators, I don&#39;t deny we have a&#xA;&gt; long-term tension between L2 nodes and full-nodes operators about the UTXO&#xA;&gt; set growth, but for now I would rather solve this with smarter engineering&#xA;&gt; such as utreexo on the base-layer side or multi-party shared-utxo or&#xA;&gt; compressed colored coins/authentication smart contracts (e.g&#xA;&gt; opentimestamp&#39;s merkle tree in OP_RETURN) on the upper layers rather than&#xA;&gt; altering the current equilibrium.&#xA;&gt;&#xA;&gt; I think the status quo is good enough for now, and I believe we would be&#xA;&gt; better off to learn from another development cycle before tweaking the dust&#xA;&gt; limit in any sense.&#xA;&gt;&#xA;&gt; Antoine&#xA;&gt;&#xA;&gt; [0]&#xA;&gt; https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html&#xA;&gt; [1] https://github.com/lightningnetwork/lightning-rfc/pull/869&#xA;&gt;&#xA;&gt; Le dim. 8 août 2021 à 14:53, Jeremy &lt;jlrubin at mit.edu&gt; a écrit :&#xA;&gt;&#xA;&gt;&gt; We should remove the dust limit from Bitcoin. Five reasons:&#xA;&gt;&gt;&#xA;&gt;&gt; 1) it&#39;s not our business what outputs people want to create&#xA;&gt;&gt; 2) dust outputs can be used in various authentication/delegation smart&#xA;&gt;&gt; contracts&#xA;&gt;&gt; 3) dust sized htlcs in lightning (&#xA;&gt;&gt; https://bitcoin.stackexchange.com/questions/46730/can-you-send-amounts-that-would-typically-be-considered-dust-through-the-light)&#xA;&gt;&gt; force channels to operate in a semi-trusted mode which has implications&#xA;&gt;&gt; (AFAIU) for the regulatory classification of channels in various&#xA;&gt;&gt; jurisdictions; agnostic treatment of fund transfers would simplify this&#xA;&gt;&gt; (like getting a 0.01 cent dividend check in the mail)&#xA;&gt;&gt; 4) thinly divisible colored coin protocols might make use of sats as&#xA;&gt;&gt; value markers for transactions.&#xA;&gt;&gt; 5) should we ever do confidential transactions we can&#39;t prevent it&#xA;&gt;&gt; without compromising privacy / allowed transfers&#xA;&gt;&gt;&#xA;&gt;&gt; The main reasons I&#39;m aware of not allow dust creation is that:&#xA;&gt;&gt;&#xA;&gt;&gt; 1) dust is spam&#xA;&gt;&gt; 2) dust fingerprinting attacks&#xA;&gt;&gt;&#xA;&gt;&gt; 1 is (IMO) not valid given the 5 reasons above, and 2 is preventable by&#xA;&gt;&gt; well behaved wallets to not redeem outputs that cost more in fees than they&#xA;&gt;&gt; are worth.&#xA;&gt;&gt;&#xA;&gt;&gt; cheers,&#xA;&gt;&gt;&#xA;&gt;&gt; jeremy&#xA;&gt;&gt;&#xA;&gt;&gt; --&#xA;&gt;&gt; @JeremyRubin &lt;https://twitter.com/JeremyRubin&gt;&#xA;&gt;&gt; &lt;https://twitter.com/JeremyRubin&gt;&#xA;&gt;&gt; _______________________________________________&#xA;&gt;&gt; Lightning-dev mailing list&#xA;&gt;&gt; Lightning-dev at lists.linuxfoundation.org&#xA;&gt;&gt; https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev&#xA;&gt;&gt;&#xA;&gt; _______________________________________________&#xA;&gt; bitcoin-dev mailing list&#xA;&gt; bitcoin-dev at lists.linuxfoundation.org&#xA;&gt; https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev&#xA;&gt;&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20210809/84b13e96/attachment-0001.html&gt;</html></oembed>