Feedback-ID: i525146e8:Fastmail
Date: Thu, 2 Nov 2023 06:26:38 +0000
From: Peter Todd <pete@petertodd.org>
To: Antoine Riard <antoine.riard@gmail.com>
Message-ID: <ZUNBHsw2BldPLvPc@petertodd.org>
References: <CALZpt+GdyfDotdhrrVkjTALg5DbxJyiS8ruO2S7Ggmi9Ra5B9g@mail.gmail.com>
 <ZTMWrJ6DjxtslJBn@petertodd.org>
 <CALZpt+GQ9g-uwAGYogdaJcinVHRxs4=67hML78KbramJg=davA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="oybkqytvrv2jeSnz"
Content-Disposition: inline
In-Reply-To: <CALZpt+GQ9g-uwAGYogdaJcinVHRxs4=67hML78KbramJg=davA@mail.gmail.com>
Cc: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>,
 security@ariard.me, "lightning-dev\\\\@lists.linuxfoundation.org"
 <lightning-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] OP_Expire and Coinbase-Like Behavior: Making
 HTLCs Safer by Letting Transactions Expire Safely
Precedence: list


--oybkqytvrv2jeSnz
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 02, 2023 at 05:24:36AM +0000, Antoine Riard wrote:
> Hi Peter,
>=20
> > So, why can't we make the HTLC-preimage path expire? Traditionally, we'=
ve
> tried
> > to ensure that transactions - once valid - remain valid forever. We do
> this
> > because we don't want transactions to become impossible to mine in the
> event of
> > a large reorganization.
>=20
> I don't know if reverse time-lock where a lightning spending path becomes
> invalid after a block height or epoch point solves the more advanced
> replacement cycling attacks, where a malicious commitment transaction
> itself replaces out a honest commitment transaction, and the
> child-pay-for-parent of this malicious transaction is itself replaced out
> by the attacker, leading to the automatic trimming of the malicious
> commitment transaction.

To be clear, are you talking about anchor channels or non-anchor channels?
Because in anchor channels, all outputs other than the anchor outputs provi=
ded
for fee bumping can't be spent until the commitment transaction is mined, w=
hich
means RBF/CPFP isn't relevant.

--=20
https://petertodd.org 'peter'[:-1]@petertodd.org

--oybkqytvrv2jeSnz
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=BIPC
-----END PGP SIGNATURE-----

--oybkqytvrv2jeSnz--