Replying to Avatar Super Testnet

Did you know bolt12 only lets you have a static qr code if you reuse the same pubkey again and again? This is bad for your privacy and allows companies like Chainalysis to offer a transaction monitoring tool for lightning. Bolt12 considered harmful.
Avatar
JackTheMimic 10mo ago

Reusing BOLT12 offer per inflow = Good

Reusing BOLT12 offer for multiple inflows = Bad

Just create an offer PER each usecase.

Reply to this note

Please Login to reply.

Discussion

Avatar
Super Testnet 10mo ago

yes, but phoenix wallet makes that hard. To make a new bolt12 in phoenix wallet, you must create a new wallet and pay for more inbound capacity. This disincentive encourages payment string reuse and is bad.

Avatar
JackTheMimic 10mo ago

Yes, using embedded node wallets that use backends that aren't yours ARE hard to control. I use my own CLN node to create any offers I want. Maybe direct this criticism to Phoenix and not the BOLT12 spec.

Avatar
deleted 10mo ago

Amen

Avatar
Super Testnet 10mo ago

Agreed, the problem is Phoenix's implementation, not the bolt12 spec

Avatar
vnprc 10mo ago

I was also under the impression that phoenix's implementation was "the way it worked". Thanks for clarifying this!

e1
BOL 10mo ago

Tried bolt12 between two separate phoenix wallets ... Sent more sats than I should have been able to (according to inbound liquidity available)... Maybe I misunderstand, but if so, that seems like a killer feature/tradeoff?!