<oembed><type>rich</type><version>1.0</version><title>Matt Corallo [ARCHIVE] wrote</title><author_name>Matt Corallo [ARCHIVE] (npub1e4…jxmcu)</author_name><author_url>https://yabu.me/npub1e46n428mcyfwznl7nlsf6d3s7rhlwm9x3cmkuqzt3emmdpadmkaqqjxmcu</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>📅 Original date posted:2021-07-01&#xA;📝 Original message:&#xA;Thanks!&#xA;&#xA;On 6/29/21 01:34, Rusty Russell wrote:&#xA;&gt; Hi all!&#xA;&gt; &#xA;&gt;          John Carvalo recently pointed out that not every implementation&#xA;&gt; accepts zero-conf channels, but they are useful.  Roasbeef also recently&#xA;&gt; noted that they&#39;re not spec&#39;d.&#xA;&gt; &#xA;&gt; How do you all do it?  Here&#39;s a strawman proposal:&#xA;&gt; &#xA;&gt; 1. Assign a new feature bit &#34;I accept zeroconf channels&#34;.&#xA;&gt; 2. If both negotiate this, you can send update_add_htlc (etc) *before*&#xA;&gt;     funding_locked without the peer getting upset.&#xA;&#xA;Does it make sense to negotiate this per-direction in the channel init message(s)? There&#39;s a pretty different threat &#xA;model between someone spending a dual-funded or push_msat balance vs someone spending a classic channel-funding balance.&#xA;&#xA;&gt; 3. Nodes are advised *not* to forward HTLCs from an unconfirmed channel&#xA;&gt;     unless they have explicit reason to trust that node (they can still&#xA;&gt;     send *out* that channel, because that&#39;s not their problem!).&#xA;&gt; &#xA;&gt; It&#39;s a pretty simple change, TBH (this zeroconf feature would also&#xA;&gt; create a new set of channel_types, altering that PR).&#xA;&gt; &#xA;&gt; I can draft something this week?&#xA;&gt; &#xA;&gt; Thanks!&#xA;&gt; Rusty.&#xA;&gt; _______________________________________________&#xA;&gt; Lightning-dev mailing list&#xA;&gt; Lightning-dev at lists.linuxfoundation.org&#xA;&gt; https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev&#xA;&gt;</html></oembed>