@@ -8563,10 +8563,14 @@ macro_rules! create_offer_builder { ($self: ident, $builder: ty) => {
85638563 ///
85648564 /// Uses [`MessageRouter`] to construct a [`BlindedPath`] for the offer based on the given
85658565 /// `absolute_expiry` according to [`MAX_SHORT_LIVED_RELATIVE_EXPIRY`]. See those docs for
8566- /// privacy implications. However, if one is not found, uses a one-hop [`BlindedPath`] with
8567- /// [`ChannelManager::get_our_node_id`] as the introduction node instead. In the latter case,
8568- /// the node must be announced, otherwise, there is no way to find a path to the introduction
8569- /// node in order to send the [`InvoiceRequest`].
8566+ /// privacy implications.
8567+ ///
8568+ /// The [`Router`] used to parameterized [`ChannelManager`] may also affect privacy since it
8569+ /// implements [`MessageRouter`]. If parameterized with [`DefaultRouter`], it will delegate to
8570+ /// [`DefaultMessageRouter`]. In that case, it may return a one-hop [`BlindedPath`] with
8571+ /// [`ChannelManager::get_our_node_id`] as the introduction node if no other path can be found
8572+ /// *and* the node is announced. Otherwise, there is no way to find a path to the introduction
8573+ /// in order to send the [`InvoiceRequest`].
85708574 ///
85718575 /// Also, uses a derived signing pubkey in the offer for recipient privacy.
85728576 ///
@@ -8631,10 +8635,14 @@ macro_rules! create_refund_builder { ($self: ident, $builder: ty) => {
86318635 ///
86328636 /// Uses [`MessageRouter`] to construct a [`BlindedPath`] for the refund based on the given
86338637 /// `absolute_expiry` according to [`MAX_SHORT_LIVED_RELATIVE_EXPIRY`]. See those docs for
8634- /// privacy implications. However, if one is not found, uses a one-hop [`BlindedPath`] with
8635- /// [`ChannelManager::get_our_node_id`] as the introduction node instead. In the latter case,
8636- /// the node must be announced, otherwise, there is no way to find a path to the introduction
8637- /// node in order to send the [`Bolt12Invoice`].
8638+ /// privacy implications.
8639+ ///
8640+ /// The [`Router`] used to parameterized [`ChannelManager`] may also affect privacy since it
8641+ /// implements [`MessageRouter`]. If parameterized with [`DefaultRouter`], it will delegate to
8642+ /// [`DefaultMessageRouter`]. In that case, it may return a one-hop [`BlindedPath`] with
8643+ /// [`ChannelManager::get_our_node_id`] as the introduction node if no other path can be found
8644+ /// *and* the node is announced. Otherwise, there is no way to find a path to the introduction
8645+ /// in order to send the [`Bolt12Invoice`].
86388646 ///
86398647 /// Also, uses a derived payer id in the refund for payer privacy.
86408648 ///
0 commit comments