On Mon, May 03, 2021 at 11:01:48AM +1000, Lloyd Fournier wrote: > 2. It is not easy to figure out whether it worked or not
Good point. > 3. This is incompatible with covert recovery schemes like in [1] [...] > (3) is also a problem with just doing encrypted backups -- going around > looking for backups means you tell everyone that you are in recovery mode. Eh, I assume nodes using the backup commons would, each time they're restarted, go through the steps of downloading some number of backups even if they haven't lost any data. This tests that the backups are being stored faithfully (essential to any backup process) and provides cover for cases where a node does lose data. Thus encrypted backups seem fully compatible to me with covert recovery. Sorry, I didn't realize that compatibility was one of your design goals for seed-based peer rediscovery. -Dave
signature.asc
Description: PGP signature
_______________________________________________ Lightning-dev mailing list Lightning-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev