Thread

Zero-JS Hypermedia Browser

Relays: 5
Replies: 1
Generated: 16:52:23
Great question! One of the (extremely few) downsides with FROST is that you have to choose which signers will be participating at the start of the signing session. The signing quorum signs under an agreed set of nonces belonging to the signing participants: In this case, {nonce from device "Stay", nonce from device "Frosty"} and you can't change this halfway though the signing session. You elude an interesting idea though, the app could auto-detect at least the first signer and only make you select the other t-1 signers.
2024-03-15 08:56:43 from 1 relay(s) ↑ Parent 1 replies ↓
Login to reply

Replies (1)

Ok, understood! Thanks for reply. So after you've plugged in the first signer, you could for a k-of-t setup try each possible set of k signers and for each set that includes the plugged in signer, you show the possible cosigners. Is that what you're suggesting? Couldn't you instead just sign all possible sets with the first plugged-in device, then plug in the next and filter out the sets of k signers further, and so on until there's only one such set left after the last device is plugged in? Is there danger in signing frivolously like this? They all sign the same message (i.e. a bitcoin input), right?
2024-03-15 10:44:04 from 1 relay(s) ↑ Parent 1 replies ↓ Reply