<oembed><type>rich</type><version>1.0</version><title>salvatoshi wrote</title><author_name>salvatoshi (npub157…e60gr)</author_name><author_url>https://yabu.me/npub157y6gz0l0rfhw220rfwnujeff6q2mec33nzkwz23umkrt6482exq8e60gr</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>I got various requests over time about supporting certain special Scripts in the Ledger bitcoin app.&#xA;&#xA;It is a delicate topic to support signing arbitrary scripts, and it&#39;s not yet clear to me if there&#39;s a way that is both generic and secure enough to add to the Ledger bitcoin app. Doing it incorrectly might weaken the security model for existing Scripts.&#xA;&#xA;It is not enough to have enough info in the PSBT to technically sign - the device needs to know what kind of checks needs to be performed on the transaction before signing.&#xA;&#xA;BIP-388 defines a very generic class of Scripts that is still uniform enough to share the same signer&#39;s behavior (&#34;you spend from a well-defined account,  and change must go back to the same account&#34;), and that&#39;s been the focus so far.&#xA;&#xA;Unless a generalization is found that makes sense (and is compatible with BIP-388), custom signing behavior might be better served by separate apps, so that you can have clear signing, a UX that makes sense, and hardened checks for that use case.&#xA;&#xA;I&#39;m working on a solution for that. Please reach out if you have the need for signing certain custom Scripts – it would help to know about your use cases!</html></oembed>