Blockstream CTO Greg Maxwell on the Potential Hurdles to Better Bitcoin Privacy

The most immediate barrier involves what happens to network bandwidth. Maxwell emphasized that confidential transaction structures demand substantially heavier data loads compared to standard Bitcoin transfers—roughly fifteen times as much. Yet he suggested potential workarounds exist. He outlined a concept wherein transaction validators could delegate certain verification duties, shifting computational burdens away from full network nodes. Should someone attempt to manipulate the system, miners would possess the ability to publish evidence of the fraud and seize the fraudulent coins as compensation. "There exist certain design choices that could potentially distribute the verification burden differently, making it less expensive for all participants," Maxwell explained.

Beyond the technical realm lies an equally significant obstacle: consensus. Maxwell pointed out that meaningful resistance to privacy improvements exists within the community. "Numerous stakeholders actively oppose adding stronger privacy mechanisms to bitcoin for different motivations," he stated. Yet Maxwell predicted this resistance may eventually yield. The proliferation of privacy-oriented alternative cryptocurrencies and parallel layers creates competitive pressure. "I suspect people won't indefinitely reject CT simply because rival networks embrace it—assuming it truly benefits the protocol," he suggested. Broader acceptance becomes increasingly probable as the underlying technology matures, particularly if engineers can minimize the bandwidth overhead currently associated with CT systems.

Several pathways toward integrating these features already exist in development. Bitcoin developer Felix Weis introduced one approach on the development mailing list during early 2016, proposing a soft fork mechanism that maintains backward compatibility. Maxwell, however, expresses reservation about such designs. "Currently, these proposals carry significant constraints," he remarked. "Most critically, network reorganizations create complications when transitioning coins from CT-protected status back into standard transactions. Coins would face a waiting period of approximately one hundred blocks following their exit from confidential protection to prevent consensus breaks." He drew parallels to extension block proposals, which encounter identical problems. "Should this prove the sole viable method, perhaps it's acceptable, though I'd prefer discovering a superior alternative," Maxwell reflected. "I haven't succeeded yet, though Bitcoin's history shows that solutions emerge for problems that initially seemed unsolvable."