Jack Ronaldi ⛓ #341

Product @VLSProject ⚡️ Fiat product manager by day 🔸

[Jack Ronaldi ⛓ #341 @JackRonaldi]

When engaging with Bitcoin skeptics, it is important to define our vision & our why.

If we each have different goals & values, the conversation should focus on these first.

Otoh, if we share goals & values, and disagree on how to get there, a fruitful debate can be had on how

[Validating Lightning Signer @VLSProject]

If you want VLS support in LND, drop a comment here: https://t.co/anZxmXJWVs

[Validating Lightning Signer @VLSProject]

“Non-custodial” is not a security model on Lightning.

Because signing must be online, the real question is:
If your node is compromised, what can the attacker do?

[Validating Lightning Signer @VLSProject]

Your keys are not your coins if your signer does not validate.

Blind signing is shared custody with two failure points.

Read about the four Lightning custody models and how VLS enables secure, non-custodial Lightning:

https://t.co/VNbk4QCosy

[Validating Lightning Signer @VLSProject]

A Lightning wallet is only really self-custodial if:

1. The node runs on your device
or
2. You connect to your own node
or
3. You're using VLS

If it’s using the provider’s node, your keys don’t protect you.

The provider's node can tell your wallet to do anything.

[Validating Lightning Signer @VLSProject]

A wallet that blind-signs but calls itself “non-custodial” is like a bank claiming it’s non-custodial because they don’t know your online banking password.

[Validating Lightning Signer @VLSProject]

A hardware wallet that blindly signs any request without checking if it is legitimate would be laughed out of Bitcoin.

Yet that’s how most "non-custodial" / "self-custodial" Lightning setups work today.

VLS fixes this.

[Validating Lightning Signer @VLSProject]

Holding user funds means you’re a custodian.

Custodians face licenses, audits, and liabilities in every jurisdiction they touch.

With VLS, you can serve users without ever touching their sats.

[Validating Lightning Signer @VLSProject]

A lot of mobile Lightning wallets say they're "non-custodial."

We propose that, without VLS, they’re not.

Agree or disagree?

[Validating Lightning Signer @VLSProject]

The only thing worse than a hot wallet is a blind signer. Amiright??

[Validating Lightning Signer @VLSProject]

“We never hold your funds” beats “Trust us” every time.

[Validating Lightning Signer @VLSProject]

Spread the custody.

Just kidding. Spread the non-custody.

Tag a project that should know about VLS. 👀

[Validating Lightning Signer @VLSProject]

Not your keys, not your coins.

Not your signer, not your Lightning.

[Validating Lightning Signer @VLSProject]

The fastest route to non-custodial mobile payments:

- hosted node for uptime
- VLS for signatures
- user retains the keys

Speed plus sovereignty. 🚀🛡️

[Validating Lightning Signer @VLSProject]

Daily reminder: it’s all fun and games until you lose all your Lightning funds.

[Validating Lightning Signer @VLSProject]

Every transaction the node proposes must pass a protocol-correctness exam.

VLS wrote the exam and grades on an unforgiving curve.

No bell curve. Not on our watch.

[Validating Lightning Signer @VLSProject]

"Non-custodial" Lightning wallet is cool.

But not if it achieves that by blindly signing whatever the node asks for.

That’s only "non-custodial" in theory, not in practice.

We don’t make the rules.

[Validating Lightning Signer @VLSProject]

Role-based approvals mean the intern cannot fat-finger a ten million-sat close.

Guardrails matter inside the org too.

[Validating Lightning Signer @VLSProject]

Good UX is spending from your phone.

Good security is your phone being unable to cheat.

VLS keeps both truths in harmony. 📱✨

[Validating Lightning Signer @VLSProject]

Rolling out Lightning in a new region?

Staying non-custodial with VLS sidesteps a mountain of financial regulation.

[Validating Lightning Signer @VLSProject]

Merchants moving sats each second cannot wait for cold storage rituals.

VLS grants hot-channel speed with cold-storage level security.