Received-SPF: pass (sog-mx-3.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.220.180 as permitted sender)
	client-ip=209.85.220.180; envelope-from=gmaxwell@gmail.com;
	helo=mail-vc0-f180.google.com; 
MIME-Version: 1.0
In-Reply-To: <1515086.GQImTWpAiA@crushinator>
References: <CA+iPb=HkxeVPF0SynxCPgUkq4msrdfayFrVNFjzg29rFwqXv1w@mail.gmail.com>
	<3826251.5rGb1MfKOu@crushinator>
	<CAAS2fgQPVwMzHBWmbRLBHZcm+YEbioqUHoL_a-SLr9yWDmguiw@mail.gmail.com>
	<1515086.GQImTWpAiA@crushinator>
Date: Thu, 31 Jul 2014 20:31:19 -0700
Message-ID: <CAAS2fgT2g9FgsVuKWLLxNqE_pp1DgdAc-edLL474UQ+eJQiXwg@mail.gmail.com>
From: Gregory Maxwell <gmaxwell@gmail.com>
To: Matt Whitlock <bip@mattwhitlock.name>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Cc: Bitcoin Development <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] deterministic transaction expiration
Precedence: list

On Thu, Jul 31, 2014 at 8:26 PM, Matt Whitlock <bip@mattwhitlock.name> wrot=
e:
> I understand what you're saying, but I don't understand why it's a proble=
m. Transactions shouldn't be considered "final" until a reasonable number o=
f confirmations anyway, so the possibility that an "accepted" transaction c=
ould become invalid due to a chain reorganization is not a new danger. Ordi=
nary transactions can similarly become invalid due to chain reorganizations=
, due to inputs already having been spent in the new branch.

A distinction there is that they can only become invalid via a
conflict=E2=80=94 replaced by another transaction authored by the prior
signers. If no other transaction could be created (e.g. you're a
multisigner and won't sign it again) then there is no such risk.  It
now introduces chance events ("act of god") into the mix where they
they didn't exist before.  Basically it takes was what is a very loose
one way coupling and makes it much tighter. I'm sure if you spend a
bit thinking you can come up with some more corner cases that it would
expose=E2=80=94 e.g. flooding the network with unrelated high fee transacti=
ons
in order to push a transaction out to where it can never be mined at
all.