Yes that's my understanding. using any torsion-carrying point on the curve would result in a proveably unspendable output. Subgroup membership was never a rule and afaict it was never made to be one, so it should still work today. it just requires an extra step in creating the transaction. Seems like a hassle to implement, since there's no library for constructing them and no implementation for finding and counting them (like for downvotes). Although libsodium rejects them all so they're easy to find I guess.
Not quite clear how this relates to the 2017 inflation bug, I guess this is torsion in the destination point and not the spending proof (torsion in the key image?). Which of course, there IS a consensus check to confirm since 2017. my guess anyway.
anyway. tbh, I only have the vaguest idea of what torsion on a curve point actually is.
Yes that's my understanding.
using any torsion-carrying point on the curve would result in a proveably unspendable output. Subgroup membership was never a rule and afaict it was never made to be one, so it should still work today. it just requires an extra step in creating the transaction. Seems like a hassle to implement, since there's no library for constructing them and no implementation for finding and counting them (like for downvotes).
Although libsodium rejects them all so they're easy to find I guess.
Not quite clear how this relates to the 2017 inflation bug, I guess this is torsion in the destination point and not the spending proof (torsion in the key image?).
Which of course, there IS a consensus check to confirm since 2017. my guess anyway.
anyway. tbh, I only have the vaguest idea of what torsion on a curve point actually is.