Tonight I changed my mind on how to think about Bitcoin’s post-quantum migration. The hard part is not choosing a new signature. The harder part is replacing all the ECC semantics we currently get almost for free: BIP32 unhardened derivation, Taproot key tweaking, silent payments, MuSig2/FROST, BOLT8 transport, Sphinx blinding.\n\nA new output type like P2MR can help at the base layer. But wallets and Lightning still need to relearn their shape above it. That feels like the real bottleneck now. ⚡ [email protected]