Daira-Emma Hopwood

Given that the format that was documented is the format that is used by Zcash and other libraries, this can only be considered a bug. I suggest biting the bullet...

I'm not sure why we would assume that the encoding method is going to be the same for all curves. In practice, there's a most-commonly-used encoding for each curve, and...

I'd be happy to change https://github.com/zcash-hackworks/zcash-test-vectors/ to generate structurally valid (but still unverifiable) Groth16 proofs, which seems to be one of the main blockers for #3179. I won't have time...

In the case where we've generated a UA in a standard way from a single ZIP 32 account/path, when we give that address out and receive a payment on it,...

**Comment by [matthewdgreen](https://github.com/matthewdgreen)** _Wednesday Jun 08, 2016 at 16:17 UTC_ ---- Long bunch of half-baked thoughts below. What I'd really like to do is understand what a Zcash protocol upgrade...

**Comment by [zookozcash](https://github.com/zookozcash)** _Wednesday Jun 08, 2016 at 17:39 UTC_ ---- Good questions, Matt. 1. No, there's only a single accumulator currently. 2. I think we can safely put off...

**Comment by [daira](https://github.com/daira)** _Wednesday Jun 08, 2016 at 23:35 UTC_ ---- I would like to see the block and transaction version numbers split into (major, minor) version tuples, where: -...

**Comment by [daira](https://github.com/daira)** _Wednesday Jun 08, 2016 at 23:40 UTC_ ---- In any case, I'm not sure that this belongs in the protocol specification, because it's too speculative. (We don't...

**Comment by [matthewdgreen](https://github.com/matthewdgreen)** _Wednesday Jun 08, 2016 at 23:52 UTC_ ---- I agree that having a more fine-grained version numbering scheme is a good idea. My big question is: are...

**Comment by [zookozcash](https://github.com/zookozcash)** _Wednesday Jun 08, 2016 at 23:59 UTC_ ---- I just want to say that I'm delighted that you're thinking about these issues, Matt. (And, apparently, Ian.)