ZmnSCPxj [ARCHIVE] on Nostr: 📅 Original date posted:2021-08-16 📝 Original message:Good morning TS, > ...
📅 Original date posted:2021-08-16
📝 Original message:Good morning TS,
> Entering a BTC address for a transaction can pose a risk of error (human or technical). While
> there is a checksum integrated in BTC addresses already, this is used only at a technical
> level and does not avoid entering a valid but otherwise wrong address. Moreover, it does not
> improve the overall user experience.
>
> In case this hasn't been discussed before, I propose to implement a 3 or 4 digit code (lets
> call it 4DC for this text), generated as checksum from the address. This 4DC should be shown
> in all wallets next to the receiving address. When entering a new address to send BTC, the
> sending wallet should also show the 4DC next to the entered address. This way, the sending
> person can easily verify that the resulting 4DC matches the one from the receiving address.
>
> This would mean that a receiver would not only send his public address to the sender, but also
> the 4DC. A minor disadvantage since a) it is not mandatory and b) it is very easy to do.
> However, it would greatly reduce the probability of performing transactions to a wrong address.
>
> Technically, this is very easy to implement. The only effort needed is agreeing on a checksum
> standard to generate the code. Once the standard is established, all wallet and exchange
> developers can start implementing this.
I think the "only" effort here is going to be the main bulk of the effort, and it will still take years of agreement (or sipa doing it, because every review is "either sipa made it, or we have to check *everything* in detail for several months to make sure it is correct").
In any case --- the last 5 characters of a bech32 string are already a human-readable 5-digit code, with fairly good properties, why is it not usable for this case?
On the other side of the coin, if you say "the existing bech32 checksum is automatically checked by the software", why is forcing something to be manually checked by a human better than leaving the checking to software?
Regards,
ZmnSCPxj
Published at
2023-06-07 22:58:07Event JSON
{
"id": "7c5f9afc808a9596a9a889bb170d4cf8de35fa66b176ab25a5a9a12ff75d3901",
"pubkey": "4505072744a9d3e490af9262bfe38e6ee5338a77177b565b6b37730b63a7b861",
"created_at": 1686178687,
"kind": 1,
"tags": [
[
"e",
"a33b3f0d53c98f3fc059fbd1e00cf1f7838bc50bfea2f6b6c05733132d02affb",
"",
"root"
],
[
"e",
"c272453d24f8bd4207d0787db7180ed1f285789b52d6cf3302d07a9385fc4c93",
"",
"reply"
],
[
"p",
"d21fc7e471e0d199f0d54f7c85aae7eb189ec6238ea9e961d3cd67d809840541"
]
],
"content": "📅 Original date posted:2021-08-16\n📝 Original message:Good morning TS,\n\n\u003e Entering a BTC address for a transaction can pose a risk of error (human or technical). While\n\u003e there is a checksum integrated in BTC addresses already, this is used only at a technical\n\u003e level and does not avoid entering a valid but otherwise wrong address. Moreover, it does not\n\u003e improve the overall user experience.\n\u003e\n\u003e In case this hasn't been discussed before, I propose to implement a 3 or 4 digit code (lets\n\u003e call it 4DC for this text), generated as checksum from the address. This 4DC should be shown\n\u003e in all wallets next to the receiving address. When entering a new address to send BTC, the\n\u003e sending wallet should also show the 4DC next to the entered address. This way, the sending\n\u003e person can easily verify that the resulting 4DC matches the one from the receiving address.\n\u003e\n\u003e This would mean that a receiver would not only send his public address to the sender, but also\n\u003e the 4DC. A minor disadvantage since a) it is not mandatory and b) it is very easy to do.\n\u003e However, it would greatly reduce the probability of performing transactions to a wrong address.\n\u003e\n\u003e Technically, this is very easy to implement. The only effort needed is agreeing on a checksum\n\u003e standard to generate the code. Once the standard is established, all wallet and exchange\n\u003e developers can start implementing this.\n\nI think the \"only\" effort here is going to be the main bulk of the effort, and it will still take years of agreement (or sipa doing it, because every review is \"either sipa made it, or we have to check *everything* in detail for several months to make sure it is correct\").\n\nIn any case --- the last 5 characters of a bech32 string are already a human-readable 5-digit code, with fairly good properties, why is it not usable for this case?\n\nOn the other side of the coin, if you say \"the existing bech32 checksum is automatically checked by the software\", why is forcing something to be manually checked by a human better than leaving the checking to software?\n\n\nRegards,\nZmnSCPxj",
"sig": "6194220e8fd3532cda639d2adddb0017ed9b59140b7083c2ee50cc9f024a1cba22d02f5b84ddd2d36dd9a6957aedc8dd81a93b93999394c8ed3ffc4db40b93fd"
}