Posted by Antoine Riard
May 6, 2020/08:27 UTC
In a recent email exchange between Antoine Riard and Andrés G. Aragoneses, Riard discusses the challenges of designing a mobile-first Lightning Network (LN) experience, particularly in terms of security and privacy. He notes that while there are light client protocols for LN, their privacy and security guarantees with regards to implementation on the client-side may still be an object of concern. One of the bottlenecks is likely the number of full-nodes being willing to dedicate resources to serve those clients. Riard argues that unless your light client protocol is so cheap as to rely on niceness of a subset of node operators offering free resources, it won't scale.Assuming 10M light clients each consuming ~100MB/month for filters/headers, that means you're asking 1PB/month of traffic to the backbone network. If you assume 10K public nodes, like today, assuming all of them opt-in to signal BIP 157, that's an increase of 100GB/month for each. Which is consequent with regards to the estimated cost of 350GB/month for running an actual public node. He argues that it may be wise to dedicate more resources to increasing the health and security of the backbone network like deploying more outbound connections instead of relying on cheaper, more efficient protocols like BIP 157. Furthermore, the LN security model diverges hugely from basic on-chain transactions. The worst-case attack on-chain is a malicious light client server showing a longest, invalid, PoW-signed chain to double-spend the user. On LN, the liveliness requirement means the entity owning your view of the chain can lie to you on whether your channel has been spent by a revoked commitment, the real tip of the blockchain or even dry-up block announcement to trigger unexpected behavior in the client logic. Riard suggests introducing monetary compensation in exchange for servicing filters. Light client not dedicating resources to maintain the network but free-riding on it, you may use their micro-payment capabilities to price chain access resources. This proposition may suit within the watchtower paradigm, where another entity is delegated some part of protocol execution, alleviating client onliness requirement. In conclusion, Riard argues that it may be good to consider a reasonable alternative to just relying on a few thousand full-node operators being nice and servicing friendly millions of LN mobiles clients.
TLDR
We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.
We'd love to hear your feedback on this project?
Give Feedback