> A BIP-70 signed payment request in the initial broadcast can resolve the > integrity issues, but because of the public nature of the broadcast > coupled with strong public identity, the privacy compromise is much > worse. Now transactions are cryptographically tainted. > > This is also the problem with BIP-70 over the web. TLS and other > security precautions aside, an interloper on the communication, desktop, > datacenter, etc., can capture payment requests and strongly correlate > transactions to identities in an automated manner. The payment request > must be kept private between the parties, and that's hard to do.
What about using encryption with forward secrecy? Merchant would generate signed request containing public ECDH part, buyer would send back transaction encrypted with ECDH and his public ECDH part. If receiving address/amount is meant to be private, use commit protocol (see ZRTP/RedPhone) and short authentication phrase (which is hard to spoof thanks to commit protocol - see RedPhone)? ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Bitcoin-development mailing list Bitcoin-development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development
