Validating Lightning Signer @VLSProject

Non-custodial Lightning security for serious balances. Off-node keys + full validation = a compromised node can’t steal funds Open source Rust SDK. https://t.co/uyM2m1tBs7 gitlab.com/lightning-sign… Joined September 2020

Tweets

724
Followers

1K
Following

51
Likes

216

Validating Lightning Signer @VLSProject

12 hours ago

Also, threshhold FROST-in-MuSig2 is not "proven" yet, the way MuSig2-in-MuSig2 is proven, so general threshhold will also have to wait until that is proven too.

0 0 1 43 0

View Details

Validating Lightning Signer @VLSProject

12 hours ago

With much, much difficulty. ZmnSCPxj joined VLS in March to look into this. Short version: first step is to remove `shachain` and then it requires an upgrade to the LN protocol to make multisig revocation work. Rest assured, real Lightning multisig is on our roadmap.

calle @callebtc

a day ago

@citlayik @VLSProject how do you make a threshold sig wallet wallet with vls?

2 0 0 991 0

2 0 4 852 0

View Details

Validating Lightning Signer @VLSProject

14 hours ago

When a business integrates Lightning, they are betting their reputation on the infrastructure. If a breach happens, it is their name in the headline. Hot wallet security is a lot of risk for that bet.

0 1 1 31 0

View Details

Validating Lightning Signer @VLSProject

2 days ago

If you are building a fintech product and want to add Lightning payments without taking on custody regulation, you need a way for users to hold their own keys while you run the infrastructure. That is exactly the architecture VLS enables.

0 1 2 38 0

View Details

Validating Lightning Signer @VLSProject

3 days ago

You do not need to be paranoid to invest in better Lightning security. Just ask yourself: at what channel balance would I start losing sleep with my current setup? That is when it starts mattering.

0 1 1 88 0

View Details

Validating Lightning Signer @VLSProject

4 days ago

When one Lightning operator gets hacked, it is not just their problem. It's a headline that makes every other business more cautious about adopting Lightning. Safer infrastructure benefits the whole ecosystem, not just the operator running it.

0 0 1 67 0

View Details

Validating Lightning Signer @VLSProject

5 days ago

Lightning's best marketing is a merchant who accepts it confidently. That confidence comes from channel balances they are comfortable holding. And those balances depend on the security of the underlying setup.

0 2 3 95 0

View Details

Validating Lightning Signer @VLSProject

6 days ago

UX is the most talked-about Lightning adoption bottleneck. But there is another one that gets less attention: operators with real money do not yet trust the security model enough to commit real balances. Both need solving.

1 3 5 195 1

View Details

Validating Lightning Signer @VLSProject

5 days ago

@DrShift3 What are you thinking of building?

0 0 0 7 0

View Details

Validating Lightning Signer @VLSProject

7 days ago

For Lightning to become a real payment network, merchants need to onboard with meaningful channel balances. But no merchant is going to commit real operating capital to a hot wallet they cannot defend. Better security is what gets them to say yes.

0 0 1 52 0

View Details

Validating Lightning Signer @VLSProject

a week ago

Leaked credentials, misconfigured firewalls, unpatched CVEs, rogue insiders. These are not exotic attacks. They happen constantly across the software industry, even more so recently. If any of them give access to the node process, and the node holds keys, the funds are gone.

0 1 4 137 0

View Details

Validating Lightning Signer @VLSProject

a week ago

@citlayik @ripsline @BlksGreenlight VLS already works with CLN and LDK btw.

0 0 1 17 0

View Details

Validating Lightning Signer @VLSProject

2 weeks ago

A pattern VLS enables: A provider hosts the Lightning node for uptime and reliability, but the user's signer enforces policy independently. The provider never gets signing authority. @BlksGreenlight is one example of this working in production.

1 2 5 157 0

View Details

Validating Lightning Signer @VLSProject

a week ago

@boyacaxa

0 0 1 9 0

View Details

Validating Lightning Signer @VLSProject

a week ago

One reason VLS is open source: every bug found and fixed benefits every team using it. That is a better model than every company maintaining its own proprietary signing stack in isolation.

1 0 3 147 0

View Details

Validating Lightning Signer @VLSProject

a week ago

If you want VLS support in LND, drop a comment here: github.com/lightningnetwo…

ripsline @ripsline

2 weeks ago

@VLSProject @BlksGreenlight What is the technical explanation LND has given for not integrating VLS?

2 0 3 192 0

0 3 6 140 0

View Details

Validating Lightning Signer @VLSProject

a week ago

@ripsline @BlksGreenlight Here's the open issue. If you want to see it in LND, drop a comment: github.com/lightningnetwo…

1 1 4 40 0

View Details

Validating Lightning Signer @VLSProject

a week ago

Bigger channel balances unlock bigger commerce. But what business is going to park 6 - 7 figures on a hot wallet? That is the ceiling you hit without better security. VLS moves that ceiling.

0 0 1 66 0

View Details

Validating Lightning Signer @VLSProject

a week ago

@ripsline @BlksGreenlight LND would need to add interfaces to expose commitment and revocation state to a remote signer. There's some nascent work on this. @lightning would know where it stands.