12/ It’s possible that not all claims will be honored, since the number of claims is *unbounded*. When there’re too many claims, you can only reward the miners who contributed the most amount of PoW, not every single one.
-
-
@jimmysong thinks that there’s no way to ensure that the winning miner cannot cheat, i.e., ignore/censor shares. I’m inclined to agree, curious on how#braidpool solves this. https://twitter.com/jimmysong/status/1005630024396017664 … -
> "the winning miner has no choice in the payout -- he committed to it before he started hashing that block and can't change it afterwards." How does "commitment" work? is commitment backed by PoW?
-
The commitment is to a set of half-signed lightning payments dependent on the channel in the coinbase, signed by the block creator. So yes it's backed by PoW.
-
Ok. And you said the miner made the commitment *before he started hashing that block*? So does the commitment have any weight before the block has been mined? I'm trying to understand how you prevent the miner from dropping / censoring shares in the payout.
-
No it has no weight before he mines the block. It's a Merkle tree commitment just like the transaction Merkle root used in Bitcoin. It's worthless unless you solve the PoW. But if you solve the PoW without the correct commitment, it's an invalid share and won't get paid.
-
"Invalid" as in Bitcoin full nodes will reject blocks without correct commitment, right? So full nodes need to update their consensus rules to be aware of this payout commitment in the coinbase? Does
#braidpool require a soft/hard fork? -
These are share-chain blocks, so the share-chain will reject blocks without correct commitments. Bitcoin is blissfully unaware this is going on (and doesn't need to be aware).
-
Interesting. What happens if the share-chain reject a block but the main chain accepts it? Don't the main chain rules override the share-chain rules?
- 11 more replies
New conversation -
-
-
p2pool lowered the block rate to 30s and sees ~30% orphan rates. As such, it punishes latency much more heavily than the main chain. You just can't run a blockchain with 1s block intervals. You can with a DAG.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

