<oembed><type>rich</type><version>1.0</version><author_name>npub1xqshkqv2g7uea4xzqwvmgjcz7u8vfavw6aazs999v0azsv3w7u3qpymc2p</author_name><author_url>https://nostr.ae/npub1xqshkqv2g7uea4xzqwvmgjcz7u8vfavw6aazs999v0azsv3w7u3qpymc2p</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2015-02-20&#xA;📝 Original message:Hello Adam,&#xA;&#xA;On Fri, 20 Feb 2015, Adam Back wrote:&#xA;&#xA;&gt; So I was wondering what about changing to committing a bloom filter of&#xA;&gt; the addresses in the block.  Its seems surprising no one thought of it&#xA;&gt; that way before (as it seems obvious when you hear it) but that seems&#xA;&gt; to address the privacy issues as the user can fetch the block bloom&#xA;&gt; filters and then scan it in complete privacy.  (Someone appeared on&#xA;&gt; bitcoin wizards IRC a while back and made this observation.)&#xA;&#xA;I have heard this idea of inverting the bloom filter before (possibly in &#xA;#bitcoin-wizards), and as I see it it would indeed improve the privacy. &#xA;Apart from privacy it would also lower the burden for nodes. A block scan &#xA;with bloom filter is effectively a cheap DoS on a node.&#xA;&#xA;In addition to that it will also avoid the &#39;transaction withholding &#xA;attack&#39; that is possible with the current bloom filtering, at least if the &#xA;filter is e.g. committed to in the block header.&#xA;&#xA;The drawback would be overhead - the bloom filter per block will have a &#xA;significant size (to avoid false positives), and the client would have to &#xA;fetch entire blocks that have its transactions in it.&#xA;&#xA;I don&#39;t think that is so bad in practice, after all the % of blocks that &#xA;will have transactions for a given wallet will generally be low, so the &#xA;block size is amortized in a way. Of course, if the block size would be &#xA;increased this would become worse.&#xA;&#xA;Wladimir</html></oembed>