Open ariard opened 3 years ago
I think, if we want to do this, we can use libbitcoinconsensus. We'd have to very carefully define our trust model, though, plus we'd really risk adding a ton of brittle code and missing one corner case in basically unused code.
A light client connected to a trusted-third party could be passive to malicious force-closure or undefined behaviors due to invalid spend of the funding output. Make sure our monitoring backend is tamper-proof against this or if we can't due to technical reasons add optional witness validation.
See https://github.com/rust-bitcoin/rust-lightning/pull/649#discussion_r490356533