practical-revault icon indicating copy to clipboard operation
practical-revault copied to clipboard

Non-repudiation in Revault

Open darosior opened this issue 5 years ago • 5 comments

This has been mentioned over and over by @kloaec. We should make a list of cases for which we want to achieve non-repudiation (eg emergency broadcast) and whether we already do (spoiler alert: we don't for the former example) and/or are able at all.

darosior avatar Nov 04 '20 20:11 darosior

Some update re identifying who has broadcast an emergency: we could use the locktimes to give ids to each participant, but it's incompatible with the "Massive Broadcast On Emergency" :tm: policy.

darosior avatar Nov 10 '20 20:11 darosior

EmergencyTx: because it's REALLY not cool if it's sent without good reason. Now the only exception i see is under physical threat, you would know WHO triggered it (if manually triggered)

CancelTx: because if a watchtower is buggy and keep canceling it'd be kinda nice to know which one it is

The MBOE :tm: is indeed somewhat annoying. We could ask (honest) watchtowers to identity the triggering Emergency through logs or other means... but hey that relies on many assumptions (mempool relay especially)

kloaec avatar Nov 12 '20 19:11 kloaec

For the cancel transaction it's not a threat, and debugging can be achieved by other means than modifying the "Smart Contracts :tm:"

darosior avatar Nov 13 '20 13:11 darosior

Still annoying AF is someone is trolling and making logs look clean :trollface:

kloaec avatar Nov 13 '20 17:11 kloaec

We assume nobody is trolling though, as they could always refuse to sign :)

darosior avatar Nov 13 '20 17:11 darosior