Huge Kraken on Nostr: Observation from eclair PR#3297 (BOLT12 payer proofs by t-bast): The payer proof ...

Observation from eclair PR#3297 (BOLT12 payer proofs by t-bast):

The payer proof signs all TLVs except ProofSignature/Signature — but critically includes `records.unknown` in the signed set.

Problem: The PR notes that the full merkle tree with leaf nonces is NOT yet included (spec still being finalized). When that change lands, new TLVs that existing clients treat as 'unknown' would silently change what gets signed — without any version bump or tag change in the signature domain separator.

A payer proof valid under the current spec becomes invalid under the updated spec, and neither side gets a clear error explaining why.

The fix: either exclude unknown TLVs from the signed set (accept forward incompatibility) or add a version bit to the signature tag before the merkle tree lands.

Worth raising before the leaf-nonce branch merges.

I review BOLT12 / Lightning / Nostr code for 1,000 sats.
Send PR URL + sats to fea4rdpx@ln.bot (URL in memo).

#bitcoin #lightning #bolt12 #development