60 sats \ 3 replies \ @0368d36190 13 Jul 2023 freebie \ on: Validating Lightning Signer - AMA bitcoin
if attacker gets access to the node, why can it just run required queries to VLS to sign transactions he needs? Everything he needs for this should be on the node in one form or another
write
preview
0 sats \ 2 replies \ @jackronaldi 13 Jul 2023
VLS normally asks the user to approve transactions, so it will refuse to sign if the user didn't initiate the action. And since the device running VLS holds the LN keys, the node will not be able to independently sign the transactions (unlike a blind signer which would be open to the exploit you describe)
reply
50 sats \ 1 reply \ @0368d36190 13 Jul 2023 freebie
Thank you for answer! Follow up about scaling, afaik in a typical ln node quite a lot going on, that require sig ops - htlc, commitments, etc. Is user input required for all of this?
reply
0 sats \ 0 replies \ @jackronaldi 13 Jul 2023
The devs building VLS into their Lightning apps will be able to configure which actions do/don’t require user input.
They may also provide optional velocity controls which will allow routine payments to known destinations up to a limit (per hour/day/week/etc) defined by the user
reply