On Wed, Oct 21, 2015 at 8:49 AM, Christian Decker <[email protected]> wrote: > Isn't that sort of what this BIP describes as well? Except that we use the > scriptSig to transport the signatures internally to the transactions and > strip them when it comes to signing/checking? The wire format and transport > of transactions do not change so old clients continue to fetch and process > transactions as before, they just can't verify the TX. Blocks still > reference the instance but verification uses the stripped TX with the > signatures on the side, etc.
"sort of" Using the sighash normalization doesn't allow creating a utxo set or scanning the blockchain while only transferring ~1/3rd of the data (allowing for reduced security fast start, and private lite wallets); it requires txin ID rewriting when the witness changes on a parent transaction; it requires hashing each transaction multiple times (for the normalized ID, and the old ID), it requires storing two IDs for every transaction in the UTXO set. -- but indeed, it's easier to deploy (though not infinitely easier as I thought before). _______________________________________________ bitcoin-dev mailing list [email protected] https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
