Safer NOINPUT with output tagging



Summary:

The acceptability of address reuse in Bitcoin transactions depends solely on the contract between the payer and payee. If the contract prohibits address reuse, it is not acceptable, and this has nothing to do with how the payee spends the coin. Address reuse cannot be banned at a protocol level unless the blockchain is never pruned, so prevention of address reuse must occur at a social level.NOINPUT is a weak excuse for addressing the issue of address reuse because NOINPUT always commits to the value and if the payer reuses an address but for a different amount, the payee can’t claim the coin is lost due to previous NOINPUT use. A stronger way to prevent address reuse is to publish the key after a coin is well confirmed.However, there are some situations where a wallet may want to use NOINPUT for everything, including normal L1 payments. This scenario breaks when address reuse is rejected/ignored unconditionally by the recipient, and the payee is considered to have burned their bitcoins by attempting it. This could adversely affect other proposals that require NOINPUT.


Updated on: 2023-05-20T18:45:25.455787+00:00