π§΅I've been seeing a few comments lately that blockweight is an ugly hack, the witness discount was a mistake, and that the blocksize increase was unnecessary. A few thoughts.π
Segwit was a bug fix, an efficiency improvement, and a blocksize increase. Economic incentives drive segwit adoption. Blocks have been mostly bigger than 1β―MB since end of 2018.
We have seen in the past what happens when blockspace demand exceeds the stable block production: feerates explode through the roof as transactions outbid each other to get confirmed. Then the market slowly adopts best practices to do more with less blockspace.π
Even while the blockspace market is relaxed today, the network is consistently facilitating almost the same number of payments per day as at the peak of the 2017β18 feerate event and transferring 2β3Γ the value.π
Without the witness discount, the wrapped segwit formats would have been more expensive than corresponding legacy formats, native segwit v0 formats would have had about the same size as legacy.
Only Pay-to-Taproot is smaller both in raw size and weight.π
P2TR would have been economically attractive even without the witness discount; even more so if it had shipped with CISA. It would certainly have been great to go from P2PKH/P2SH directly to P2TR. But Taproot was invented years after segwit and CISA is still under development.π
Would Bitcoin be as successful if segwit hadn't been rolled out to enable the Lightning Network when it was? β¦if the blockspace market had been going wild for the last five years? Would BTC even have won the blocksize wars without the forward-compatibility of wrapped-segwit?π
It's all speculation because that's not the history we have lived through. I'm all for learning from the past and changing your mind, but the recent calls for blocksize decreases and removing the witness discount baffle me. Blocks are consistently bigger than 1 MB.π
β’ β’ β’
Missing some Tweet in this thread? You can try to
force a refresh
1/ It's not only about RPis at home. A 10 s block interval would mean that block propagation and block validation take a significant chunk of the interval.
You'd get blockchain forks abound, poor block relay because of many competing chaintips, bad network convergence,β¦
2/ β¦ large miners would be hugely advantaged by being able to build on top of their own block immediately instead of needing to wait to receive foreign blocks, which causes mining centralization and supercharges selfish mining.
3/ The high cost-of-node-option (CONOP) would crowd out most validators due to bandwidth, computational, and disk space requirements as well as the slow IBD. Small businesses and retail users would be forced to rely on 3rd parties for validation.
@achow101, @glozow, and I have been scrutinizing the Bitcoin Core wallet coin selection lately. We have multiple ideas for improvements, but we have very little usage data to evaluate them. So far, we have one scenario generated from a service's data.
We're looking forβ¦
β’ people living on Bitcoin
β’ Bitcoin power users
β’ fervent sat stackers
β’ services
that would be willing to share payment history (from any wallet) with us.
We're looking for large sequences of `{Β±amount, feerate}`. Amounts can be slightly altered or rounded for privacy.
We mostly care that the payment sequence was generated by one entity rather than us assembling random unrelated data from the blockchain. The data would be used to add scenarios to github.com/achow101/coin-β¦, which we're using to test Bitcoin Core wallet improvements.
As people were getting ready to get married on the beach, a brief discussion of economic incentives of cross-input signature aggregation (CISA) led to an interesting comment (H/T @n1ckler) that made me rethink my characterization of its potential cost savings. π§΅/9
CISA refers to the idea of multiple inputs on a single transaction sharing a single signature. This is possible due to all signatures committing to the same message (i.e. to all outputs via `SIGHASH_DEFAULT`) and the signing algorithm's linearity. 2/9 bitcoin.stackexchange.com/a/107068/5406
Other examples why "bit" as the standard unit of bitcoin amounts would be confusing AF:
β’ "This setup has 180-bit security"
β’ "If you keep all your bitcoin in one address, a single bit flip could lose it all."
β’ "The current difficulty bits are 0x170a1078."
π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯
π₯π₯π₯π₯π₯TAPROOT IS LIVEπ₯π₯π₯π₯π₯
π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯π₯