{"type":"rich","version":"1.0","author_name":"npub1e46n428mcyfwznl7nlsf6d3s7rhlwm9x3cmkuqzt3emmdpadmkaqqjxmcu","author_url":"https://nostr.ae/npub1e46n428mcyfwznl7nlsf6d3s7rhlwm9x3cmkuqzt3emmdpadmkaqqjxmcu","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2011-12-16\n🗒️ Summary of this message: Proposal to use Bitcoin's existing code for transactions to IP addresses for dynamic address lookup. Suggestions include extending the protocol and enabling DNS lookups.\n📝 Original message:On Thu, 2011-12-15 at 13:59 -0600, theymos wrote:\n\u003e Bitcoin already has code and a protocol for transactions to IP\n\u003e addresses. Why not reuse that for dynamic address lookup? Just a few\n\u003e changes are necessary to enable complete user at server.com handling:\nI'm not against this, but I think its way overcomplicated when compared\nto the DNS or HTTPS methods.\n\u003e - Extend the protocol so that \"reply\" messages can be signed by a fixed\n\u003e   public key\n\u003e - Extend \"checkorder\" messages so they can specify an account to\n\u003e   send BTC to. Or standardize on how to put the account into the\n\u003e   message field.\nOK, not too debatable, but considering how terrible bitcoind's account\nhandling is, the second might not be easy to get right...\n\u003e - Enable DNS lookups for IP transactions. The DNS-only proposals could\n\u003e   also be used here to avoid having to use the IP transaction protocol\n\u003e   sometimes. The public key for signing \"reply\" messages can be gotten\n\u003e   from TXT records. This will be safe with DNSSEC and Namecoin. With\n\u003e   plain DNS Bitcoin could take a SSH-like approach and ask the user to\n\u003e   verify the public key the first time it is used, remembering it later.\nThis is where I think this method becomes way overcomplicated.  Not only\ndo you have to update the IP-Transaction code, but now you have to\nimplement the full DNS System that is the other option as well.  Note\nthat to make this secure, we have to have a full DNSSEC-capable resolver\nbuilt-into bitcoind (there are libs, but it has to happen).  Yes you can\nask the user \"does this fingerprint look right to you? Y/N\" but that\nalways opens you up to a ton of users getting screwed out of coins and I\ndon't think it should be enabled, except in bitcoind, and since the main\ntarget of this whole alias system is bitcoin-qt users, well...\n\nMatt"}