<oembed><type>rich</type><version>1.0</version><author_name>npub1xz8q68hmzur6c6uje593nscy3q4njx05h4vnxmz2wxxptx7u7casl2925u</author_name><author_url>https://nostr.ae/npub1xz8q68hmzur6c6uje593nscy3q4njx05h4vnxmz2wxxptx7u7casl2925u</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2012-11-26&#xA;📝 Original message:I hope you all take a moment to see what DANE leverages with DNSSEC&#xA;and SelfSigned x.509 certs. DANE provides the capability for any&#xA;entity to associate a self signed certificate with a domain name. This&#xA;capability removes the critical path of whitelists and/or Root CA&#xA;certs.&#xA;&#xA;Another nifty thing is that it can associate a cert to a domain and a&#xA;payment address, if one were to put said address in the DNS :)&#xA;&#xA;Now I am sure the majority of the bitcoin user-base desires anonymity,&#xA;but as a merchant I would like to be knowable and wouldn&#39;t mind it if&#xA;my identity and those of my transactions were &#34;known&#34; and associated&#xA;both with my domains and x.509 cert. In most commercial transactions&#xA;(which include many of those that leverage invoices) identity is&#xA;important, at least for the merchant.&#xA;&#xA;-rick&#xA;&#xA;&#xA;On Mon, Nov 26, 2012 at 3:52 PM, Jeff Garzik &lt;jgarzik at exmulti.com&gt; wrote:&#xA;&gt; On Mon, Nov 26, 2012 at 5:37 PM, Gavin Andresen &lt;gavinandresen at gmail.com&gt; wrote:&#xA;&gt;&gt; This is the next big &#34;lets all agree to do things the same way&#34; thing&#xA;&gt;&gt; I think we should tackle. I&#39;m particularly looking for feedback from&#xA;&gt;&gt; other bitcoin client developers, even if it is just a quick &#34;looks&#xA;&gt;&gt; reasonable, if everybody else is going to do it then I will&#xA;&gt;&gt; (eventually) too...&#34;&#xA;&gt;&#xA;&gt; Comments:&#xA;&gt;&#xA;&gt; 1) Payment message should include ability to specify the transaction&#xA;&gt; _or_ a transaction id sent via normal means over the network.&#xA;&gt;&#xA;&gt; 2) I think a significant bitcoin userbase will want to operate outside&#xA;&gt; the full root-CA chain.  Just look at https:// websites now.&#xA;&gt; Self-signed certs are quite common, because it is easier, while being&#xA;&gt; more secure than http://&#xA;&gt;&#xA;&gt; So some provision for self-signed certs, a use case in wide use&#xA;&gt; elsewhere, or equivalent thereof, seems reasonable.&#xA;&gt;&#xA;&gt; --&#xA;&gt; Jeff Garzik&#xA;&gt; exMULTI, Inc.&#xA;&gt; jgarzik at exmulti.com&#xA;&gt;&#xA;&gt; ------------------------------------------------------------------------------&#xA;&gt; Monitor your physical, virtual and cloud infrastructure from a single&#xA;&gt; web console. Get in-depth insight into apps, servers, databases, vmware,&#xA;&gt; SAP, cloud infrastructure, etc. Download 30-day Free Trial.&#xA;&gt; Pricing starts from $795 for 25 servers or applications!&#xA;&gt; http://p.sf.net/sfu/zoho_dev2dev_nov&#xA;&gt; _______________________________________________&#xA;&gt; Bitcoin-development mailing list&#xA;&gt; Bitcoin-development at lists.sourceforge.net&#xA;&gt; https://lists.sourceforge.net/lists/listinfo/bitcoin-development</html></oembed>