MIME-Version: 1.0
References: <CALZpt+GBPbf+Pgctm5NViNons50aQs1RPQkEo3FW5RM4fL9ztA@mail.gmail.com>
 <202005051300.38836.luke@dashjr.org>
 <CALZpt+GR8L6Zo_4A8LJb=yndr32g62XFKBmGiWMSRaZqHrfOog@mail.gmail.com>
 <CALeFGL3LnhEhcsuCeusBjZL=4Exm9fiQuALDfN53wrHLLGMejA@mail.gmail.com>
 <CALZpt+Fmv3d-J69uyoJ5XB9hP78vqoS76Y2OVmHWqafkHTm5ZQ@mail.gmail.com>
 <CALeFGL3WRF11Q7d3Mea5nHS2da1atEfXArpdAfMfd1uJ+5f3JA@mail.gmail.com>
 <ecce23db-2622-b257-5a05-22a40aafd1e3@purse.io>
 <CALeFGL0vRM5o21oD0mrtPFnRCdRTUkyEv_nry3SQ4nvgyShGdA@mail.gmail.com>
In-Reply-To: <CALeFGL0vRM5o21oD0mrtPFnRCdRTUkyEv_nry3SQ4nvgyShGdA@mail.gmail.com>
From: Christopher Allen <ChristopherA@lifewithalacrity.com>
Date: Fri, 8 May 2020 14:29:48 -0700
Message-ID: <CACrqygCbX8ru=OJk==3T+Bav7ykiO+Vid98tLY--ww__fr-PjA@mail.gmail.com>
To: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>, 
 Keagan McClelland <keagan.mcclelland@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000006d9e505a529b3e9"
Cc: "lightning-dev\\\\@lists.linuxfoundation.org"
 <lightning-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] [Lightning-dev] On the scalability issues of
 onboarding millions of LN mobile clients
Precedence: list

--00000000000006d9e505a529b3e9
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, May 8, 2020 at 2:00 PM Keagan McClelland via bitcoin-dev <
bitcoin-dev@lists.linuxfoundation.org> wrote:

> Perhaps I wasn't explicit in my previous note but what I mean is that
> there seems to be a demand for something *in between* a peer interface,
> and an owner interface. I have little opinion as to whether this belongs =
in
> core or not, I think there are much more experienced folks who can weight
> in on that, but without something like this, you cannot limit your exposu=
re
> for serving something like bip157 filters without removing your own abili=
ty
> to make use of some of those same services.
>

Our FullyNoded2 multisig wallet on iOS & Mac, communicates with your own
personal node over RPC, securing the connection using Tor over a hidden
onion service and two-way client authentication using a v3 Tor
Authentication key: https://github.com/BlockchainCommons/FullyNoded-2

It many ways the app (and its predecessor FullyNoded1) is an interface
between a personal full node and a user.

However, we do wish that the full RPC functionality was not exposed in
bitcoin-core. I=E2=80=99d love to see a cryptographic capability mechanism =
such
that the remote wallet could only m ask the node functions that it needs,
and allow escalation for other rarer services it needs with addition
authorization.

This capability mechanism feature set should go both ways, to a minimum
subset needed for being a watch-only transaction verification tool, all the
way to things RPC can=E2=80=99t do like deleting a wallet and changing bitc=
oin.conf
parameters and rebooting, without requiring full ssh access to the server
running the node.

If there are people interested in coordinating some proposals on how to
defining different sets of wallet functionality, Blockchain Commons would
be interested in hosting that collaboration. This could start as just being
a transparent shim between bitcoin-core & remote RPC, but later could
inform proposals for the future of the core wallet functionality as it gets
refactored.

=E2=80=94 Christopher Allen

--00000000000006d9e505a529b3e9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div>On Fri, May 8, 2020 at 2:00 PM Keagan McClelland via bitcoin-dev &lt;<=
a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org">bitcoin-dev@lists.l=
inuxfoundation.org</a>&gt; wrote:<br></div><div><div class=3D"gmail_quote">=
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div>Perhaps I wasn&#39;t e=
xplicit in my previous note but what I mean is that there seems to be a dem=
and for something <i>in between</i> a peer interface, and an owner interfac=
e. I have little opinion as to whether this belongs in core or not, I think=
 there are much more experienced folks who can weight in on that, but witho=
ut something like this, you cannot limit your exposure for serving somethin=
g like bip157 filters without removing your own ability to make use of some=
 of those same services.</div></div></blockquote><div dir=3D"auto"><br></di=
v><div dir=3D"auto">Our FullyNoded2 multisig wallet on iOS &amp; Mac, commu=
nicates with your own personal node over RPC, securing the connection using=
 Tor over a hidden onion service and two-way client authentication using a =
v3 Tor Authentication key: <a href=3D"https://github.com/BlockchainCommons/=
FullyNoded-2">https://github.com/BlockchainCommons/FullyNoded-2</a></div><d=
iv dir=3D"auto"><br></div><div dir=3D"auto">It many ways the app (and its p=
redecessor FullyNoded1) is an interface between a personal full node and a =
user.</div><div dir=3D"auto"><br></div><div dir=3D"auto">However, we do wis=
h that the full RPC functionality was not exposed in bitcoin-core. I=E2=80=
=99d love to see a cryptographic capability mechanism such that the remote =
wallet could only m ask the node functions that it needs, and allow escalat=
ion for other rarer services it needs with addition authorization.=C2=A0</d=
iv><div dir=3D"auto"><br></div><div dir=3D"auto">This capability mechanism =
feature set should go both ways, to a minimum subset needed for being a wat=
ch-only transaction verification tool, all the way to things RPC can=E2=80=
=99t do like deleting a wallet and changing bitcoin.conf parameters and reb=
ooting, without requiring full ssh access to the server running the node.</=
div><div dir=3D"auto"><br></div><div dir=3D"auto">If there are people inter=
ested in coordinating some proposals on how to defining different sets of w=
allet functionality, Blockchain Commons would be interested in hosting that=
 collaboration. This could start as just being a transparent shim between b=
itcoin-core &amp; remote RPC, but later could inform proposals for the futu=
re of the core wallet functionality as it gets refactored.</div><div dir=3D=
"auto"><br></div><div dir=3D"auto">=E2=80=94 Christopher Allen</div></div><=
/div>

--00000000000006d9e505a529b3e9--