Jack Ronaldi ⛓ #341

If you want VLS support in LND, drop a comment here: github.com/lightningnetwork/…

“Non-custodial” is not a security model on Lightning. Because signing must be online, the real question is: If your node is compromised, what can the attacker do?

Your keys are not your coins if your signer does not validate. Blind signing is shared custody with two failure points. Read about the four Lightning custody models and how VLS enables secure, non-custodial Lightning: vls.tech/posts/lightning-cus…

A Lightning wallet is only really self-custodial if: 1. The node runs on your device or 2. You connect to your own node or 3. You're using VLS If it’s using the provider’s node, your keys don’t protect you. The provider's node can tell your wallet to do anything.

A wallet that blind-signs but calls itself “non-custodial” is like a bank claiming it’s non-custodial because they don’t know your online banking password.

A hardware wallet that blindly signs any request without checking if it is legitimate would be laughed out of Bitcoin. Yet that’s how most "non-custodial" / "self-custodial" Lightning setups work today. VLS fixes this.

Holding user funds means you’re a custodian. Custodians face licenses, audits, and liabilities in every jurisdiction they touch. With VLS, you can serve users without ever touching their sats.

A lot of mobile Lightning wallets say they're "non-custodial." We propose that, without VLS, they’re not. Agree or disagree?

The only thing worse than a hot wallet is a blind signer. Amiright??

“We never hold your funds” beats “Trust us” every time.

Spread the custody. Just kidding. Spread the non-custody. Tag a project that should know about VLS. 👀

Not your keys, not your coins. Not your signer, not your Lightning.

The fastest route to non-custodial mobile payments: - hosted node for uptime - VLS for signatures - user retains the keys Speed plus sovereignty. 🚀🛡️

Daily reminder: it’s all fun and games until you lose all your Lightning funds.

Every transaction the node proposes must pass a protocol-correctness exam. VLS wrote the exam and grades on an unforgiving curve. No bell curve. Not on our watch.

"Non-custodial" Lightning wallet is cool. But not if it achieves that by blindly signing whatever the node asks for. That’s only "non-custodial" in theory, not in practice. We don’t make the rules.

Role-based approvals mean the intern cannot fat-finger a ten million-sat close. Guardrails matter inside the org too.

Good UX is spending from your phone. Good security is your phone being unable to cheat. VLS keeps both truths in harmony. 📱✨

Rolling out Lightning in a new region? Staying non-custodial with VLS sidesteps a mountain of financial regulation.

Merchants moving sats each second cannot wait for cold storage rituals. VLS grants hot-channel speed with cold-storage level security.