📅 Original date posted:2013-11-06
📝 Original message:On 2 November 2013 22:14, Johnathan Corgan <johnathan at corganlabs.com> wrote:
> On 11/01/2013 10:01 PM, bitcoingrant at gmx.com wrote:
>
> > Server provides a token for the client to sign.
>
> Anyone else concerned about signing an arbitrary string? Could be a
> hash of $EVIL_DOCUMENT, no? I'd want to XOR the string with my own
> randomly generated nonce, sign that, then pass the nonce and the
> signature back to the server for verification.
>
Good point.
There are actually times you may want to sign a transaction.
There's a little know HTTP code, 402, "Payment Required". We should really
start using this at some point ...
http://en.wikipedia.org/wiki/List_of_HTTP_status_codes
Reserved for future use.[2] The original intention was that this code might
be used as part of some form of digital cash or micropayment scheme, but
that has not happened, and this code is not usually used. As an example of
its use, however, Apple's defunct MobileMe service generated a 402 error if
the MobileMe account was delinquent.[citation needed] In addition, YouTube
uses this status if a particular IP address has made excessive requests,
and requires the person to enter a CAPTCHA.
>
> --
> Johnathan Corgan, Corgan Labs
> SDR Training and Development Services
> http://corganlabs.com
>
>
> ------------------------------------------------------------------------------
> Android is increasing in popularity, but the open development platform that
> developers love is also attractive to malware creators. Download this white
> paper to learn more about secure code signing practices that can help keep
> Android apps secure.
> http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20131106/0a43b210/attachment.html>;
Melvin Carvalho [ARCHIVE] /
npub1uv…saxrt
2023-06-07 15:08:30
in reply to nevent1q…6wke
Author Public Key
npub1uvtfvcegcn9kds68r8he57emc480vqtx8t22kpsctxgjxae44gvsksaxrtPublished at
2023-06-07 15:08:30Event JSON
{
"id": "f826edfacf5ff4ee895f83bf91ebf9d089a1b6325f55e0c37310c5783542009b",
"pubkey": "e316966328c4cb66c34719ef9a7b3bc54ef601663ad4ab06185991237735aa19",
"created_at": 1686150510,
"kind": 1,
"tags": [
[
"e",
"724c6f13ca667850218ef24a7051f9062418fb5d7bd972070be69e4bf08accba",
"",
"root"
],
[
"e",
"aba4bf9fdaa49eaad22cc8b1b1e83eaaabbb2f19db3a9afefb59625c62c721aa",
"",
"reply"
],
[
"p",
"6b41dfcce682764d40c00fd6580a99614b6bbe8a8332085dea07afbc47ba9e8f"
]
],
"content": "📅 Original date posted:2013-11-06\n📝 Original message:On 2 November 2013 22:14, Johnathan Corgan \u003cjohnathan at corganlabs.com\u003e wrote:\n\n\u003e On 11/01/2013 10:01 PM, bitcoingrant at gmx.com wrote:\n\u003e\n\u003e \u003e Server provides a token for the client to sign.\n\u003e\n\u003e Anyone else concerned about signing an arbitrary string? Could be a\n\u003e hash of $EVIL_DOCUMENT, no? I'd want to XOR the string with my own\n\u003e randomly generated nonce, sign that, then pass the nonce and the\n\u003e signature back to the server for verification.\n\u003e\n\nGood point.\n\nThere are actually times you may want to sign a transaction.\n\nThere's a little know HTTP code, 402, \"Payment Required\". We should really\nstart using this at some point ...\n\nhttp://en.wikipedia.org/wiki/List_of_HTTP_status_codes\n\nReserved for future use.[2] The original intention was that this code might\nbe used as part of some form of digital cash or micropayment scheme, but\nthat has not happened, and this code is not usually used. As an example of\nits use, however, Apple's defunct MobileMe service generated a 402 error if\nthe MobileMe account was delinquent.[citation needed] In addition, YouTube\nuses this status if a particular IP address has made excessive requests,\nand requires the person to enter a CAPTCHA.\n\n\n\u003e\n\u003e --\n\u003e Johnathan Corgan, Corgan Labs\n\u003e SDR Training and Development Services\n\u003e http://corganlabs.com\n\u003e\n\u003e\n\u003e ------------------------------------------------------------------------------\n\u003e Android is increasing in popularity, but the open development platform that\n\u003e developers love is also attractive to malware creators. Download this white\n\u003e paper to learn more about secure code signing practices that can help keep\n\u003e Android apps secure.\n\u003e http://pubads.g.doubleclick.net/gampad/clk?id=65839951\u0026iu=/4140/ostg.clktrk\n\u003e _______________________________________________\n\u003e Bitcoin-development mailing list\n\u003e Bitcoin-development at lists.sourceforge.net\n\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e\n\u003e\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20131106/0a43b210/attachment.html\u003e",
"sig": "d74a7479f5459f08b4ffa0610b1a20a8bf1a194f924346c71250e27a30bdeba34edd1ed9d6b62fe37ce416eee64e5e1bae9a7f9239d2e374ec53ed512fd54764"
}