MIME-Version: 1.0
References: <CAPv7TjbnsqHwW=Oj7n_WJFR4vp1ND78NgV0=Ftj5doNuKOxLCg@mail.gmail.com>
	<PS2P216MB0179E804329D495A4EE6F4EC9D010@PS2P216MB0179.KORP216.PROD.OUTLOOK.COM>
In-Reply-To: <PS2P216MB0179E804329D495A4EE6F4EC9D010@PS2P216MB0179.KORP216.PROD.OUTLOOK.COM>
From: Ruben Somsen <rsomsen@gmail.com>
Date: Fri, 7 Sep 2018 02:35:24 +0900
Message-ID: <CAPv7TjawW9Z0frbjzfWe3y04V7zM1hdmUeJYjNLOtJnWVhZZ0w@mail.gmail.com>
To: willtech@live.com.au
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Cc: bitcoin-dev@lists.linuxfoundation.org
Subject: Re: [bitcoin-dev] Guiding transaction fees towards a more
 censorship resistant outcome
Precedence: list

Hi Damian,

>Where you say "create transactions which are only valid if they are mined =
on top of a specific block." - in practice, does that usually means at any =
height above a specific block?

Those details aren't important for the point I was trying to make.
BIP115 allows the transaction to be mined at any height, which is
probably as far as you can take this, realistically. What I think
you'll find in practice, is that the more specific you are in how you
want your transaction to be mined, the higher the chance that your
transaction will inadvertently become unmineable.

A perhaps more general point that I realized after posting, is that
fee pressure towards censorship resistance happens naturally if the
system provides anonymity. If the target transaction that miners wish
to censor is indistinguishable from other anonymous transactions, then
miners will have no choice but to censor every anonymous transaction,
so the end result is very similar to what I imagined linking
transactions would do.

-- Ruben Somsen
On Thu, Sep 6, 2018 at 5:48 PM Damian Williamson <willtech@live.com.au> wro=
te:
>
> Humour me please,
>
>
> Where you say "create transactions which are only valid if they are mined=
 on top of a specific block." - in practice, does that usually means at any=
 height above a specific block?
>
> ________________________________
> From: bitcoin-dev-bounces@lists.linuxfoundation.org <bitcoin-dev-bounces@=
lists.linuxfoundation.org> on behalf of Ruben Somsen via bitcoin-dev <bitco=
in-dev@lists.linuxfoundation.org>
> Sent: Sunday, 2 September 2018 3:26:54 AM
> To: bitcoin-dev@lists.linuxfoundation.org
> Subject: [bitcoin-dev] Guiding transaction fees towards a more censorship=
 resistant outcome
>
> When a user creates a transaction with a fee attached, they are
> incentivizing miners to add this transaction to the blockchain. The
> task is usually not very specific -- as long as it ends up in a valid
> chain with the most Proof-of-Work, miners get paid. The payment is an
> incentive for miners to act in the way that users desire.
>
> To the user, there=E2=80=99s an individual benefit: their transaction get=
s
> added. To the network, there=E2=80=99s a shared benefit: all fees add to =
the
> security of other transactions in the chain. Miners can choose to
> ignore the incentives, but they would be leaving money on the table
> (and eventually get replaced by more competitive miners).
>
> Transactions from Bitcoin Core are slightly more specific about what
> they ask miners to do. Every transaction is only valid at a block
> height that is one higher than the last block. This incentivizes
> miners to build on top of the last block, instead of going back and
> reorganizing the blockchain. This is especially important in a future
> scenario where the fee reward is larger than the block reward.
>
> BIP 115* by Luke-jr is even more specific. It enables users to create
> transactions which are only valid if they are mined on top of a
> specific block. While originally designed as a form of replay
> protection, it actually serves as a deterrent for miners to reorganize
> the blockchain. If they orphan a block, it will invalidate
> transactions that demanded the inclusion of the orphaned block. This
> increases the cost of intentionally reorganizing the blockchain.
>
> Coinjoin**, the act of combining payments of multiple users into a
> single transaction, can be seen as yet another method for users to be
> more specific. The fate of their payments are now intertwined with
> that of others. If miners wish to censor a single payment, they have
> to reject the entire transaction, and the associated fee amount.
> Techniques like mimblewimble simplify this process, by making coinjoin
> non-interactive.
>
> This brings us to a theoretical scenario where:
>
> - every block contains only a single coinjoin transaction
> - the validity of this transaction depends on the inclusion of a
> specific previous block
> - the block reward is negligible compared to transaction fees
>
> In this scenario, if miners wish to undo a specific transaction that
> happened two blocks ago, they would have to create three empty blocks
> (receiving negligible compensation) in order to overtake the longest
> chain. And even then, users can still refuse to let their new
> transactions be mined on top of the empty blocks, disincentivizing
> such behavior completely.
>
> While not easy to achieve in practice (e.g. resolving natural forks
> becomes more complicated), it demonstrates that users can become more
> empowered than they are today, benefitting censorship resistance***.
> It is this line of thinking that I wish to convey. Perhaps it may
> inspire further ideas in this direction.
>
> -- Ruben Somsen
>
>
> * BIP 115: https://apc01.safelinks.protection.outlook.com/?url=3Dhttps%3A=
%2F%2Fgithub.com%2Fbitcoin%2Fbips%2Fblob%2Fmaster%2Fbip-0115.mediawiki&amp;=
data=3D02%7C01%7C%7C48403f77efc14613e89b08d611f5980c%7C84df9e7fe9f640afb435=
aaaaaaaaaaaa%7C1%7C0%7C636716143839246019&amp;sdata=3Dreq4KYOcztXLAG%2Fu4Rr=
mhLREGBF28JNTe45pO86kRd4%3D&amp;reserved=3D0
>
> ** Coinjoin: https://apc01.safelinks.protection.outlook.com/?url=3Dhttps%=
3A%2F%2Fbitcointalk.org%2Findex.php%3Ftopic%3D279249.0&amp;data=3D02%7C01%7=
C%7C48403f77efc14613e89b08d611f5980c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1=
%7C0%7C636716143839246019&amp;sdata=3Dd%2B06jxrKubWhLwoInFEgo8eHvI9f1j74QN8=
WH7xrVos%3D&amp;reserved=3D0
>
> *** Risk sharing principle:
> https://apc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fgithu=
b.com%2Flibbitcoin%2Flibbitcoin%2Fwiki%2FRisk-Sharing-Principle&amp;data=3D=
02%7C01%7C%7C48403f77efc14613e89b08d611f5980c%7C84df9e7fe9f640afb435aaaaaaa=
aaaaa%7C1%7C0%7C636716143839246019&amp;sdata=3DNA3HxqI5PnuyaI9hyCaw0rcaFsrh=
D%2FXQB8biWJXej8g%3D&amp;reserved=3D0
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://apc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Flists=
.linuxfoundation.org%2Fmailman%2Flistinfo%2Fbitcoin-dev&amp;data=3D02%7C01%=
7C%7C48403f77efc14613e89b08d611f5980c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C=
1%7C0%7C636716143839246019&amp;sdata=3D9P7UetPmKWngjgjNPE0%2BAMgdzuL2DgqBLo=
Lti82f23M%3D&amp;reserved=3D0