3 ms·
The trust involved in the Zcash trusted setup is a significantly better type of trust than what you're suggesting, because you only have to trust the people inv
by petertodd 9y ago
The trust involved in the Zcash trusted setup is a significantly better type of trust than what you're suggesting, because you only have to trust the people involved once. Signing messages is an ongoing trust, which is far more vulnerable to attack.
- runeks 9y ago> The trust involved in the Zcash trusted setup is a significantly better type of trust than what you're suggesting, because you only have to trust the people involved once. I disagree. Since there’s no way for you to prove that you have actually destroyed the secret in question, there’s no way for me to know where that key is now and, hence, how long I need to trust you. “Only having to trust the people involved once” presupposes that I trust that they have destroyed the key properly, otherwise the key might still be out there, and the trust would be ongoing in this case as well.
- Doxin 9y agoWorst case the two scenarios equate to the same thing. Namely there's one or more people you need to trust indefinitely. Best case however is where they differ a lot. Best case for this method is trusting someone once. Best case for the other method is still trusting one or more people indefinitely.