hugohanoi on Nostr: Anti-exfil techniques spill engineering challenges into the user space. They also add ...

Anti-exfil techniques spill engineering challenges into the user space. They also add a new dependency on the wallet coordinator to perform security-sensitivity tasks.

Tasks which they are not well suited for.

How can you even verify that the coordinator will be able to provide good entropy? You can’t.

So there’s also this hidden danger of using anti-exfil with singlesig with a coordinator running in unsafe environments, and THINK you’re safe, but you’re not. Turtles all the way down.

Just use multisig and be happy.