Jeff Burdges

We should likely remove the slashing spans after the unbonding period, perhaps by making stakers remove them whenever they touch their account, like unbonding, etc. We could make their controller...

I'll claim naivety/idealism on that one. We really did not know all the practical concerns when designing this. We ideally do want to chill nominators like this eventually, but only...

Is this going to check a signature too? Or assume the block was already imported?

I'd expect drand "blocks" have no block author, so it's plausible block author makes little sense in other threshold signed schemes (think ICP/dFinity). I think wacky dag merge schemes could...

In sassafras, we envision users sending tx directly to the slot where they want the tx posted. As a similar aurababe hack, users could send a tx directly to the...

I'd focus on the jubjubs before worrying about the pairing friendly curves, not sure if zcash's jubjub is constant time. Also see https://github.com/zkcrypto/bls12_381/

I'd wait for https://github.com/rust-lang/rfcs/pull/2859 and see how dalek, etc. use it before worrying about this.

I'll note my second and preferred solution of recording body hashes requires that replay protection use cuckoo filters instead of bloom filters.

Appears the IETF working draft is https://github.com/pairingwg/bls_standard/blob/master/minutes/spec-v1.md *not* the version on the webpage.

I'm interested in aligning with https://github.com/kwantam/bls_sigs_ref as much as possible, although I obviously want to provide more flexibility than the standard, like permitting signatures on either group. See also https://github.com/algorand/bls_sigs_ref...