Quote from: vjudeu on Today at 05:27:43 AM

It is better to make a regular soft-fork in that case: https://groups.google.com/g/bitcoindev/c/p8xz08YTvkw

Interesting that this was brought up very recently, perhaps due to the recent news of Chinese researchers which used D-WAVE annealing quantum computers to optimize an approach to crack RSA.

However, the idea with BitVM is that any cryptosystem could be emulated. The Bitcoin developers would have some time more to decide which algorithm is the best one, and then could opt for a soft fork in the late 2020s or even in the 2030s, when the algorithms have been tested extensively. Meanwhile those who already want to secure their Bitcoins with a "candidate" post-quantum algorithm (or any "more advanced" cryptographic algorithm) could do it.

Quote from: vjudeu on Today at 05:27:43 AM

It shouldn't matter, because you shouldn't put everything on-chain. See: https://bitcointalk.org/index.php?topic=277389.0 (this topic contains the word "witness", but it is not about Segwit).

Yes, this was already known to me. I'm however not sure how much must be posted on-chain in the case a spend is contested.

Quote from: vjudeu on Today at 05:27:43 AM

Even if ECDSA will be broken, then still, there are scripts you can do, which could be safely used,

Interesting

Will try to investigate about this.

Quote from: vjudeu on Today at 05:27:43 AM

Well, there are some posts. Here is another one: https://groups.google.com/g/bitcoindev/c/SPmrzARLMFU

It seems also to be a fork proposal and not based on BitVM. I've still not found anything regarding the question (if BitVM can/should be used for this purpose).