From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmaxwell@gmail.com>
Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org
	[172.17.192.35])
	by mail.linuxfoundation.org (Postfix) with ESMTPS id 40B33D13
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Fri,  1 Jun 2018 04:15:16 +0000 (UTC)
X-Greylist: whitelisted by SQLgrey-1.7.6
Received: from mail-ua0-f196.google.com (mail-ua0-f196.google.com
	[209.85.217.196])
	by smtp1.linuxfoundation.org (Postfix) with ESMTPS id 08B226DB
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Fri,  1 Jun 2018 04:15:14 +0000 (UTC)
Received: by mail-ua0-f196.google.com with SMTP id x18-v6so9760389uaj.9
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Thu, 31 May 2018 21:15:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
	h=mime-version:sender:in-reply-to:references:from:date:message-id
	:subject:to; bh=ROe+EJcHtzDVgVfREK3luclNc53mlrHd3VzQn0UElAc=;
	b=oYSDuFFQJ6kQsiFq2qaMEoVhRr7UFTZSwe2Ex/VS5lB6c7qTh1RdVDwtf+/p4d1x8r
	jVRvufd+MU2b9+KR6h5VwegcSCD5L/L5U5NMlxEclg7RPykEOUqBxNLDb/muKPF9fBdE
	csF/qpnGbHI41Q9FjGYVFe5DhQWvYmxP3BVjN7EPRIdGuDxEoK3/Tm3h2T8iUXpLdZqh
	7l4in/ePRjANoZ6QqjkDYpEZsZ7mSht3E/u+JebQdxGatN+N2BK6N1J29/ey1GGXAeId
	fow1qpok6kx8x/LrDoPaZpXcIspCDdpk9PqJ2N80nZAGcdKiC3GY3lE1pnqbAoQsw5ee
	WR1Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:sender:in-reply-to:references:from
	:date:message-id:subject:to;
	bh=ROe+EJcHtzDVgVfREK3luclNc53mlrHd3VzQn0UElAc=;
	b=F3pLAtuEVXtNAlmv7jwWWuhiSZoj3QiBPKBFWLF1alQaXAI6CVab8+aHtt251hEx6W
	3MxX3nsrrBPmuGhvg9NFdEUXTsKaJUpZB6XgMmaA+6paRpWtD7o3cm1z2xVxVANm0MJp
	e7JJummvTWU9kRlsPbmi1mb73PYEUaUkzPdr1MnPTRyCO2w6PUL3F2lnstgGdhxtTBhb
	OOoKhI/d6wSM3oJGrVW+eOxPM/KgP9IjonTa4rodU8SFHhgCxi6AzrFj+6h0kcxmPh9z
	zijwBeRKfJBAk6Sa9vKYnuuJwr1A6O6+HPXnS7NwPvlG9GTio4RqOnyqelKHTwXs+E/H
	gZBA==
X-Gm-Message-State: ALKqPwdbvPrDH+nDP4a3lwH20B5gQiVNlrZ05JOuX39xfn6IP76DNirj
	U16yJtm+D03xx9hjIeFS813VM+pVZky+bW0BYTdFjA==
X-Google-Smtp-Source: ADUXVKKhVXiXATDybdTIKr9Re8WUif7u5awjVO3Hkp78lL56Ny0ty2DazvCh/Je0kV96RjeL2L9g5lcFLBuANePvo4o=
X-Received: by 2002:a9f:3b06:: with SMTP id i6-v6mr6380340uah.75.1527826513996;
	Thu, 31 May 2018 21:15:13 -0700 (PDT)
MIME-Version: 1.0
Sender: gmaxwell@gmail.com
Received: by 2002:a67:5193:0:0:0:0:0 with HTTP; Thu, 31 May 2018 21:15:13
	-0700 (PDT)
In-Reply-To: <CAO3Pvs9p5COiS_7Jbj1r2iAKTEdXUcnVTRzL27c3=CeuB9WDTQ@mail.gmail.com>
References: <d43c6082-1b2c-c95b-5144-99ad0021ea6c@mattcorallo.com>
	<CAAS2fgRF-MhOvpFY6c_qAPzNMo3GQ28RExdSbOV6Q6Oy2iWn1A@mail.gmail.com>
	<22d375c7-a032-8691-98dc-0e6ee87a4b08@mattcorallo.com>
	<CAAS2fgR3QRHeHEjjOS1ckEkL-h7=Na56G12hYW9Bmy9WEMduvg@mail.gmail.com>
	<CADZtCShLmH_k-UssNWahUNHgHvWQQ1y638LwaOfnJEipwjbiYg@mail.gmail.com>
	<CAAS2fgQLCN_cuZ-3QPjCLfYOtHfEk=SenTn5=y9LfGzJxLPR3Q@mail.gmail.com>
	<CADZtCSjYr6VMBVQ=rx44SgRWcFSXhVXUZJB=rHMh4X78Z2eY1A@mail.gmail.com>
	<CAO3Pvs9K3n=OzVQ06XGQvzNC+Aqp9S60kWM9VRPA8hWTJ3u9BQ@mail.gmail.com>
	<c23a5346-9f99-44f0-abbf-d7e7979bf1d8@gmail.com>
	<CAO3Pvs_MA4TtgCCu1NgCBjK2bZRN+rKnGQJN6m4yTrViBXRiPA@mail.gmail.com>
	<CAD3i26BibcaMdbQv-j+Egz_1y0GuhzepBp5ATNpj=Qv8hi1TVA@mail.gmail.com>
	<CADZtCShAYpbN=4qNoX5c8yd1j08+mEZzG8gZwcHrj2suY0mb9w@mail.gmail.com>
	<CADZtCShYnM3A949H18V2+BArA-K9J+cDkd=rX8xRn0+0js5CwA@mail.gmail.com>
	<CAAS2fgTXS5Tains7dfe_Rc9JxR6M=NuFW9UtieRELm+6N2uNog@mail.gmail.com>
	<CAFfwr8F+ghYb2HYEgC7Lh7Z-ytNE7EABr6cxiVXYhWLk-TPO7A@mail.gmail.com>
	<CADZtCShDzPK_jqeOrK4XBoB2uriU9c9T8Dm7By-8ew3XOoAeQg@mail.gmail.com>
	<7E4FA664-BBAF-421F-8C37-D7CE3AA5310A@gmail.com>
	<F87D7069-0FDC-4572-B02B-398A2A455935@gmail.com>
	<CAAS2fgT716PiP0ucoASxryM9y+s9H2z06Z0ToaP1xT3BozAtNw@mail.gmail.com>
	<CADZtCSguto2z6Z9CykymxnCokqo1G=sW0Ov0ht+KcD+KMnYyow@mail.gmail.com>
	<CAO3Pvs-YDzfRqmyJ85wTH0ciccjCvkm5stGyP_tVGGna=PMv3A@mail.gmail.com>
	<CAO3Pvs9p5COiS_7Jbj1r2iAKTEdXUcnVTRzL27c3=CeuB9WDTQ@mail.gmail.com>
From: Gregory Maxwell <greg@xiph.org>
Date: Fri, 1 Jun 2018 04:15:13 +0000
X-Google-Sender-Auth: NXfXkXpihbjpD6QXWVyWHNPAJW8
Message-ID: <CAAS2fgRS=NXgSBQinci6umHu=X9SxDL-GMkYomhB93PHv1_suQ@mail.gmail.com>
To: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: text/plain; charset="UTF-8"
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID, FREEMAIL_FROM,
	RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	smtp1.linux-foundation.org
Subject: Re: [bitcoin-dev] BIP 158 Flexibility and Filter Size
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
	<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
	<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Jun 2018 04:15:16 -0000

On Fri, Jun 1, 2018 at 2:52 AM, Olaoluwa Osuntokun via bitcoin-dev
<bitcoin-dev@lists.linuxfoundation.org> wrote:
> One notable thing that I left off is the proposed change to use the previous
> output script rather than the outpoint. Modifying the filters in this
> fashion would be a downgrade in the security model for light clients, as it

Only if you make a very strong assumption about the integrity of the
nodes the client is talkign to. A typical network attacker (e.g.
someone on your lan or wifi segmet, or someone who has compromised or
operates an upstream router) can be all of your peers.

The original propsal for using these kinds of maps was that their
digests could eventually be commited and then checked against the
commitment, matching the same general security model used otherwise in
SPV.

Unfortunately, using the scripts instead of the outpoints takes us
further away from a design that is optimized for committing (or, for
that matter, use purely locally by a wallet)...