<oembed><type>rich</type><version>1.0</version><author_name>npub1r375vdaydp5nnnytff6ee2kwzxak8whmwkmnkm6h67agr7dadfkqxn6ccq</author_name><author_url>https://nostr.ae/npub1r375vdaydp5nnnytff6ee2kwzxak8whmwkmnkm6h67agr7dadfkqxn6ccq</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2016-06-21&#xA;📝 Original message:Bluetooth exchange of payment requests already has a noticeable lag with &#xA;protocol buffers, so that would be another reason to argue against JSON, &#xA;because JSON is less efficient size wise, correct? I will say that &#xA;although protocol buffers have good platform support, I don&#39;t know that &#xA;the documentation for each platform is very good. This is the main &#xA;drawback I see with them. One additional advantage of protocol buffers &#xA;is that the .proto file is a specification, whereas with JSON, you&#39;d &#xA;just have an example file, right?&#xA;&#xA;Isn&#39;t keybase a centralized infrastructure? Are you against a blockchain &#xA;based identification? There are a few out there. There is some confusion &#xA;because onename&#39;s efforts are breaking away from namecoin though.&#xA;&#xA;I like the idea of PGP signatures of payment requests. This allows for &#xA;manual verification (in my mind, the highest quality) of key &#xA;authenticity (or, with PGP you also have the option to opt into some &#xA;centralized service for key verification). This can be useful when &#xA;dealing with semi-manually issued invoices for goods and services. The &#xA;local bitcoin wallet could just interact with the local PGP keyring. &#xA;Although, one can already just send the payment request in a PGP signed &#xA;e-mail, so I&#39;m not sure if PGP signing is really needed if you&#39;re using &#xA;PGP email. The main benefit may just be consolidating/itemizing into &#xA;your bitcoin wallet&#39;s transaction history whether the payment &#xA;destination/request was securely received or not. It may also be useful &#xA;for someone to be able to extract a signed payment request from a signed &#xA;PGP e-mail and send it to someone else to make a payment for you (maybe &#xA;you don&#39;t want your accounting person to need your entire e-mail &#xA;correspondence with a supplier to be able to just verify the payment &#xA;request and make a payment for your company).&#xA;&#xA;I&#39;m concerned about extending the URI scheme too much. Isn&#39;t this going &#xA;to reach the practical size limit of NFC and QR codes pretty quickly?&#xA;&#xA;&#xA;&#xA;&#xA;Andy Schroder&#xA;&#xA;On 06/21/2016 05:43 AM, Andreas Schildbach via bitcoin-dev wrote:&#xA;&gt; Protobuf vs. JSON was a deliberate decision. Afaik Protobuf was chosen&#xA;&gt; because of its strong types, less vulnerability to malleability and very&#xA;&gt; good platform support. Having coded both, I can say Protobuf is not more&#xA;&gt; difficult than JSON. (Actually the entire Bitcoin P2P protocol should be&#xA;&gt; based on Protobuf, but that&#39;s another story.)&#xA;&gt;&#xA;&gt; Yes, all extensions to BIP70 should go into new BIPs. Note the plural&#xA;&gt; here: if you have orthogonal ideas I strongly suggest one BIP per idea&#xA;&gt; so they can be discussed and implemented (or rejected) separately.&#xA;&gt;&#xA;&gt;&#xA;&gt; On 06/20/2016 07:33 PM, Erik Aronesty via bitcoin-dev wrote:&#xA;&gt;&gt; BIP 0070 has been a a moderate success, however, IMO:&#xA;&gt;&gt;&#xA;&gt;&gt; - protocol buffers are inappropriate since ease of use and extensibility&#xA;&gt;&gt; is desired over the minor gains of efficiency in this protocol.  Not too&#xA;&gt;&gt; late to support JSON messages as the standard going forward&#xA;&gt;&gt;&#xA;&gt;&gt; - problematic reliance on merchant-supplied https (X509) as the sole&#xA;&gt;&gt; form of mechant identification.   alternate schemes (dnssec/netki), pgp&#xA;&gt;&gt; and possibly keybase seem like good ideas.   personally, i like keybase,&#xA;&gt;&gt; since there is no reliance on the existing domain-name system (you can&#xA;&gt;&gt; sell with a github id, for example)&#xA;&gt;&gt;&#xA;&gt;&gt; - missing an optional client supplied identification&#xA;&gt;&gt;&#xA;&gt;&gt; - lack of basic subscription support&#xA;&gt;&gt;&#xA;&gt;&gt; /Proposed for subscriptions:/&#xA;&gt;&gt;&#xA;&gt;&gt; - BIP0047 payment codes are recommended instead of wallet addresses when&#xA;&gt;&gt; establishing subscriptions.  Or, merchants can specify replacement&#xA;&gt;&gt; addresses in ACK/NACK responses.   UI confirms are /required /when there&#xA;&gt;&gt; are no replacement addresses or payment codes used.&#xA;&gt;&gt;&#xA;&gt;&gt; - Wallets must confirm and store subscriptions, and are responsible for&#xA;&gt;&gt; initiating them at the specified interval.&#xA;&gt;&gt;&#xA;&gt;&gt; - Intervals can /only /be from a preset list: weekly, biweekly, or 1,&#xA;&gt;&gt; 2,3,4,6 or 12 months.   Intervals missed by more than 3 days cause&#xA;&gt;&gt; suspension until the user re-verifies.&#xA;&gt;&gt;&#xA;&gt;&gt; - Wallets /may /optionally ask the user whether they want to be notified&#xA;&gt;&gt; and confirm every interval - or not.   Wallets that do not ask /must&#xA;&gt;&gt; /notify before initiating each payment.   Interval confirmations should&#xA;&gt;&gt; begin at /least /1 day in advance of the next payment.&#xA;&gt;&gt;&#xA;&gt;&gt; /Proposed in general:&#xA;&gt;&gt; /&#xA;&gt;&gt; - JSON should be used instead of protocol buffers going forward.  Easier&#xA;&gt;&gt; to use, explain extend.&#xA;&gt;&gt;&#xA;&gt;&gt; - &#34;Extendible&#34; URI-like scheme to support multi-mode identity mechanisms&#xA;&gt;&gt; on both payment and subscription requests.   Support for keybase://,&#xA;&gt;&gt; netki:// and others as alternates to https://.&#xA;&gt;&gt;&#xA;&gt;&gt; - Support for client as well as merchant multi-mode verification&#xA;&gt;&gt;&#xA;&gt;&gt; - Ideally, the identity verification URI scheme is somewhat&#xA;&gt;&gt; orthogonal/independent of the payment request itself&#xA;&gt;&gt;&#xA;&gt;&gt; Question:&#xA;&gt;&gt;&#xA;&gt;&gt; Should this be a new BIP?  I know netki&#39;s BIP75 is out there - but I&#xA;&gt;&gt; think it&#39;s too specific and too reliant on the domain name system.&#xA;&gt;&gt;&#xA;&gt;&gt; Maybe an identity-protocol-agnostic BIP + solid implementation of a&#xA;&gt;&gt; couple major protocols without any mention of payment URI&#39;s ... just a&#xA;&gt;&gt; way of sending and receiving identity verified messages in general?&#xA;&gt;&gt;&#xA;&gt;&gt; I would be happy to implement plugins for identity protocols, if anyone&#xA;&gt;&gt; thinks this is a good idea.&#xA;&gt;&gt;&#xA;&gt;&gt; Does anyone think https:// or keybase, or PGP or netki all by&#xA;&gt;&gt; themselves, is enough - or is it always better to have an extensible&#xA;&gt;&gt; protocol?&#xA;&gt;&gt;&#xA;&gt;&gt; - Erik Aronesty&#xA;&gt;&gt;&#xA;&gt;&gt;&#xA;&gt;&gt; _______________________________________________&#xA;&gt;&gt; bitcoin-dev mailing list&#xA;&gt;&gt; bitcoin-dev at lists.linuxfoundation.org&#xA;&gt;&gt; https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev&#xA;&gt;&gt;&#xA;&#xA;&#xA;-------------- next part --------------&#xA;A non-text attachment was scrubbed...&#xA;Name: signature.asc&#xA;Type: application/pgp-signature&#xA;Size: 490 bytes&#xA;Desc: OpenPGP digital signature&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20160621/6970aa58/attachment.sig&gt;</html></oembed>