On Fri, Dec 17, 2021 at 11:37:12AM +0100, Joost Jager wrote: > Hello list, > > In Lightning we have a great scheme to protect the identity of the sender > of a payment. This is awesome, but there are also use cases where opt-in > sender authentication is desired.
Lightning already has sender authentication: you simply give someone a pre-image hash over an authenticated channel, and the fact that the payment was made means only they could have realistically made it as they were the only person who knew that pre-image hash. Going beyond that is dangerous as you're creating the ability to prove to a *third* party who made a particular payment. That raises serious problems in cases like government raids that need to be considered very carefully. -- https://petertodd.org 'peter'[:-1]@petertodd.org
signature.asc
Description: PGP signature
_______________________________________________ Lightning-dev mailing list Lightning-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
