You can't protect against this. Any confirmation messages are subject to the same problem. Look up the FLP paper for proof.
This is really a user interface problem; your user needs to think of a transaction during a network outage as being in an "unknown" state rather than a "succeeded" or "failed" state.
We've hit problems with ack in the past. So I thought we could add more acks to increase confidence. But it's never 100% certainty. I'm sure this paper will help understand the issues.
Comments
You can't protect against this. Any confirmation messages are subject to the same problem. Look up the FLP paper for proof.
This is really a user interface problem; your user needs to think of a transaction during a network outage as being in an "unknown" state rather than a "succeeded" or "failed" state.
Big thanks for that. I'll give it a read.
We've hit problems with ack in the past. So I thought we could add more acks to increase confidence. But it's never 100% certainty. I'm sure this paper will help understand the issues.