<oembed><type>rich</type><version>1.0</version><title>Peter Todd [ARCHIVE] wrote</title><author_name>Peter Todd [ARCHIVE] (npub1m2…a2np2)</author_name><author_url>https://yabu.me/npub1m230cem2yh3mtdzkg32qhj73uytgkyg5ylxsu083n3tpjnajxx4qqa2np2</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>📅 Original date posted:2023-08-04&#xA;🗒️ Summary of this message: Silent Payment addresses, which allow for multiple payments without privacy concerns, should have an expiration date to prevent funds from being lost forever. Adding a 3-byte field to encode the expiration date is a simple solution. Wallets should have a default expiration date and attempts to pay an expired address should fail.&#xA;📝 Original message:&#xA;tl;dr: Wallets don&#39;t last forever. They are often compromised or lost. When&#xA;this happens, the addresses generated from those wallets become a form of toxic&#xA;data: funds sent to those addresses can be easily lost forever.&#xA;&#xA;All Bitcoin addresses have this problem. But at least existing Bitcoin&#xA;addresses aren&#39;t supposed to be reused. Silent Payments are: the whole point is&#xA;to have a single address that you can safely pay to multiple times, without&#xA;privacy concerns. Failing to make Silent Payment addresses eventually expire in&#xA;a reasonable amount of time is thus a particularly harmful mistake.&#xA;&#xA;Fixing this is easy: add a 3 byte field to silent payments addresses, encoding&#xA;the expiration date in terms of days after some epoch. 2^24 days is 45,000&#xA;years, more than enough. Indeed, 2 bytes is probably fine too: 2^16 days is 180&#xA;years. We&#39;ll be lucky if Bitcoin still exists in 180 years.&#xA;&#xA;Wallets should pick a reasonable default, eg 1 year, for newly created&#xA;addresses. Attempts to pay an expired address should just fail with a simple&#xA;&#34;address expired&#34;. Lightning invoices are a good example here: while invoices&#xA;does not require expiration from a technical point of view, they do expire for&#xA;similar UX reasons as applies to silent payments.&#xA;&#xA;-- &#xA;https://petertodd.org &#39;peter&#39;[:-1]@petertodd.org&#xA;-------------- next part --------------&#xA;A non-text attachment was scrubbed...&#xA;Name: signature.asc&#xA;Type: application/pgp-signature&#xA;Size: 833 bytes&#xA;Desc: not available&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20230804/70c37a09/attachment.sig&gt;</html></oembed>