<div dir="ltr">Conceptually it sounds a lot like ZeroCoin (not in implementation)?<div><br></div><div>I'm not really convinced miner cartels that try to exclude transactions are likely to be a big deal, but such schemes could I suppose be kept in a back pocket in case one day I'm proven wrong.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, May 15, 2013 at 6:39 PM, Gregory Maxwell <span dir="ltr"><<a href="mailto:gmaxwell@gmail.com" target="_blank">gmaxwell@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Wed, May 15, 2013 at 6:24 PM, Gavin <<a href="mailto:gavinandresen@gmail.com">gavinandresen@gmail.com</a>> wrote:<br>
> Busy with pre-conference stuff, not following details of this conversation...<br>
><br>
> ... but it sounds a lot like the "guy fawkes" protocol Zooko was thinking about a year or so ago.<br>
<br>
</div>Sort of, but in a guy fawkes signature you use the commitment to hide<br>
the preimage that proves you had authority to spend a coin. Adam<br>
proposes you do this in order to hide _which coin you're spending_.<br>
<br>
This has obvious anti-DOS complications, but Adam deftly dodged my<br>
initial attempts to shoot him down on these grounds by pointing out<br>
that you could mix blinded and blinded inputs and have priority and<br>
transaction fees come from only the unblinded ones.<br>
<br>
Effectively, it means that so long as you could convince the network<br>
to let you spend some coins, you could also spend other ones along for<br>
the ride and the network wouldn't know which ones those were until it<br>
was too late for it to pretend it never saw them.<br>
<br>
I think there are all kinds of weird economic implications to this— a<br>
blinded payment would seem to have a different utility level to an<br>
unblinded one: you can't use it for fees— except you can unblind it at<br>
any time. And the discontinuousness ("two types of inputs") and that<br>
it would enable mining gibberish (though perhaps not data storage, if<br>
you see my preimage solution to that) seems awkward and I think I have<br>
to spend some time internalizing it before I can really think through<br>
the implications.<br>
<div class="HOEnZb"><div class="h5"><br>
------------------------------------------------------------------------------<br>
AlienVault Unified Security Management (USM) platform delivers complete<br>
security visibility with the essential security capabilities. Easily and<br>
efficiently configure, manage, and operate all of your security controls<br>
from a single console and one unified framework. Download a free trial.<br>
<a href="http://p.sf.net/sfu/alienvault_d2d" target="_blank">http://p.sf.net/sfu/alienvault_d2d</a><br>
_______________________________________________<br>
Bitcoin-development mailing list<br>
<a href="mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-development@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/bitcoin-development" target="_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-development</a><br>
</div></div></blockquote></div><br></div>