What if the file isn't necessarily what the client was looking for? (i.e. I upload a file called Terminator Movie, but it's actually Star Wars or just the first 30 minutes of the movie or even some kind of malware). Would that punishment just be reputation since the file could still be decrypted properly?
I've implemented a BitStream proof of concept by Robin Linus in Cashu for atomic swaps between files and Lightning payments.
Atomicity is achieved via a "Nutbond" Ecash contract which can be challenged if the downloaded file doesn't decrypt right.
An explainer and demo video is linked below.
How it works:
- Clients requests download
- Server sends encrypted file, Lightning invoice & Nutbond
- Client verifies bond and pays LN invoice
- Client decrypts file with LN preimage
- If decrypt fails, client challenges Nutbond & gets refund
Some notable differences to the original proposal:
- Nutbonds are issued for each user, not per file
- Bond doesn't burn but acts as a refund to user
- No Merkle trees yet. Next logical step. Vibes well with BitTorrent.
- Bond is Ecash. Payment is on LN, could also be Ecash.
This took me a few hours to implement showing how easy it is to experiment with new contracting primitives in Cashu.
Bitcoiners are coming up with beautiful solutions for practical problems. Special thanks to Robin for sharing his cool ideas with us. Love the energy!
🎥👇 Demo (10 min):
https://mega.nz/file/rVsF1RQS#Q1ycXiC3fcsRbIYUVBxMFDQZAqKbW5PHWZdhqkj0P8A
Original post: https://twitter.com/robin_linus/status/1723343871067804060

Discussion
I guess this can only be solved by someone attesting to the validity of that particular decrypted file hash. It must be public knowledge / well-known. Very similar to how torrents work though, so it seems to be fine.