search

lightningdevkit / rust-lightning

A highly modular Bitcoin Lightning library written in Rust. It's rust-lightning, not Rusty's Lightning!
Other
1.14k stars 353 forks source link

Optionally harden chain backend for light clients users #720

Open ariard opened 3 years ago

ariard commented 3 years ago

A light client connected to a trusted-third party could be passive to malicious force-closure or undefined behaviors due to invalid spend of the funding output. Make sure our monitoring backend is tamper-proof against this or if we can't due to technical reasons add optional witness validation.

See https://github.com/rust-bitcoin/rust-lightning/pull/649#discussion_r490356533

TheBlueMatt commented 3 years ago

I think, if we want to do this, we can use libbitcoinconsensus. We'd have to very carefully define our trust model, though, plus we'd really risk adding a ton of brittle code and missing one corner case in basically unused code.