Good point. By limiting forging power to 1% per account, I think we are opening ourselves up to a greater threat. Any thoughts?
I don't think that we are at all. Firstly already only 1/4 of the "potential forging power" is being used (this will very likely change when people can grant forging rights to pools and we do not want to make it easy for 1 pool to have a huge amount of control which they *will* if there is no max. limit imposed).
Those that are "solo" forging are going to "split up" their NXT to ensure they get their maximum forging benefit (if they are bothered enough to forge then I think they would be bothered enough to do it in the most effective manner).
That is true, forging power will consolidate because people will want more consistent payouts. So, limiting forging amounts per account is the only way to prevent colluding accounts from constructing a dangerously long chain. Ian suggested limiting forging power to 1% or 10,000,000 Nxt. I ran simulations with his program to give us some data to determine the best limiting forging percentage. I ran each simulation three times. All simulations were run for a period of ten years. When I limited the forging power, I set the collusion rate to ninety percent.
If you do not limit forging power and set the simulator so one account controls 91% and nine accounts control 1% of Nxt, the longest blockchain the 91% holder can create is an average of 465 (514, 445, 435).
If you limit forging power to 1% per account and set the simulator for 100 accounts, the longest blockchain generated by the colluding accounts is an average of 142 (151, 137, 137).
If you limit forging power to 2% per account and set the simulator for 50 accounts, the longest blockchain generated by the colluding accounts is an average of 152 (166, 133, 156).
If you limit forging power to 4% per account and set the simulator for 25 accounts, the longest blockchain generated by the colluding accounts is an average of 1137 (1102, 1262, 1045).
If you limit forging power to 5% per account and set the simulator for 20 accounts, the longest blockchain generated by the colluding accounts is an average of 1452 (1443, 1459, 1454).
If you limit forging power to 10% per account and set the simulator for 10 accounts, the longest blockchain generated by the colluding accounts is an average of 1503 (1493, 1523, 1491).
From the results of the tests, we can see that limiting forging power to anything four percent or higher results in the colluding accounts being able to construct a longer blockchain than if we do not limit forging power and one account controls 90%. Therefore, we should limit forging power to 1% or 2% per account. I agree with Ian that forging power should be limited to one percent per account.
If we don't limit forging power, we have to accept the fact that we will have to wait for 465 minutes (one block per min) for confirmation if over ninety percent of the network is colluding.