More thoughts on NOINPUT safety



Summary:

A Lightning Network developer has suggested a change to the network's rules regarding signature hashing. Currently, the rules require that transactions must not use SIGHASH_NOINPUT. The developer proposed changing this rule to require that transactions must have at least one non-SIGHASH_NOINPUT signature. However, there is concern about how this would work with watchtowers. The current plan for eltoo watchtowers involves storing both signatures in a blob sent to the watchtower, but if one of the signatures must be non-SIGHASH_NOINPUT, it's unclear how the watchtower would create such a signature. Another developer suggested that future segwit versions might relax the rule and recommended that any changes to the rules be made through consensus rather than standardness. There was also discussion on the mailing list about the potential problems caused by NOINPUT signatures, including losing funds due to replays, major exchanges banning sending funds to addresses capable of NOINPUT, and the need for safety measures. Some developers are inclined to put more safety measures in place for NOINPUT, while others prefer to keep things simple and practical.


Updated on: 2023-06-02T17:54:22.943324+00:00