{"type":"rich","version":"1.0","author_name":"npub17ty4mumkv43w8wtt0xsz2jypck0gvw0j8xrcg6tpea25z2nh7meqf4qgyd","author_url":"https://nostr.ae/npub17ty4mumkv43w8wtt0xsz2jypck0gvw0j8xrcg6tpea25z2nh7meqf4qgyd","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2015-02-05\n📝 Original message:\u003e\n\u003e For a BIP standard, I think we should skip \"bitcoin:\" URIs entirely and\n\u003e publish BIP70 payment requests instead.\n\u003e\n\nAgreed - it's not clear to me at all that this partial address scheme is\nactually secure. The assumption appears to be that the MITM must match the\naddress prefix generated by the genuine merchant. But if they can do a\nwireless MITM they can just substitute their own address prefix/partial\naddress, no?\n\nTo avoid MITM attacks the sender must know who they are sending money to,\nand that means they must see a human understandable name that's\ncryptographically bound to the right public key. Displaying partial\naddresses to the user is not going to solve this unless users manually\ncompare key prefixes across the screens.... which is even less convenient\nthan a QR code.\n\nI think it should be explained why to\n\u003e prefer broadcasting payment requests over picking them up via near field\n\u003e radio.\n\u003e\n\nThis is probably an artifact of Apple's restrictions on iOS. Only the\niPhone 6 has NFC hardware and Apple don't expose it via any public API. It\ncan however support Bluetooth LE.\n\nApple isn't a big deal in Germany because iPhone only achieved about 17%\nmarket share during the quarter when the iPhone 6 launched. Normally it's\ncloser to 10-13%. Most other markets are similar.\n\nHowever in the USA, UK, Australia and Japan iOS is still a big deal and NFC\nis going to be seen as a non-universal solution there. At least, until\nApple catches up and provides an NFC API.\n\nIt's certainly not a problem to have a working radio based broadcast\nsystem, though the theoretician in me wonders what  happens when lots of\npeople are trying to pay simultaneously for something that has equal cost\n..... e.g. buying movie tickets at a counter. NFC and QR codes prevent any\nkind of \"oops I paid for someone elses stuff\" confusion.\n\nIn practice of course Bitcoin payments are not normally popular enough for\nthis to be a problem outside of Bitcoin community events.\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150205/58dccfae/attachment.html\u003e"}