Quote from: Tom Scholl on May 27, 2013, 10:26:42 PM

Quote from: domob on May 27, 2013, 06:59:55 PM

However, one thing I wondered about: Why do you need blind signatures for this protocol in the first place? Couldn't you just simply submit your output to a chosen peer (like the blinding server) with a new network connection without obtaining a signature from the server before? After all, before each peer signs the transaction, he/she checks that his/her transaction is in there anyway, so there's no chance someone could run away with my coins. What additional trust/verification purpose does the blind signature fulfill?

Excellent question.

If you don't use blinding, any random person could submit an output, and DOS the trade. But with blinding, the blinding server can verify that the blinded outputs came from trade members -IF the members sign the message with their peerId. But I didn't mention that, because I haven't implemented it yet. I will update the notes.

Ah ok, I already presumed it would "just" be about DOS. Thanks for clarifying this, makes sense of course!