📅 Original date posted:2014-09-12
📝 Original message:On 12 Sep 2014, at 11:55 , bitcoin-development-request at lists.sourceforge.net wrote:
> The hash is meant to link the trust anchor (e.g. the QR code) to the
> payment request message in a secure way. This will solve the problem
> several apps are comparing address+amount fields as a workaround
> instead, preventing some advanced BIP70 usecases. When these apps read a
> matching hash, they need not compare any of the other fields.
Sounds like a good plan.
Do you have a list (possibly incomplete) of apps that perform this kind of checking? We’re currently working with some parties in a supply chain to allow a consumer payment on a retail website to automatically pay supply chain parties, the way BIP70 allows with multiple outputs on a transaction. This behaviour would prohibit this use case.
/Mark
Mark van Cuijk [ARCHIVE] /
npub13l…273cc
2023-06-07 15:25:40
in reply to nevent1q…qnjv
Author Public Key
npub13lftpp7g0zz6pjhvjhqqlka53e358xctk4c4fzr52yywt5cqhkvqe273ccPublished at
2023-06-07 15:25:40Event JSON
{
"id": "96ab8f9f66a2aa35fb0cdbb08e41eb3591db5dfc07543e7171014c0a0df643ff",
"pubkey": "8fd2b087c87885a0caec95c00fdbb48e63439b0bb5715488745108e5d300bd98",
"created_at": 1686151540,
"kind": 1,
"tags": [
[
"e",
"5045235f447739204820462b94c541446b82ef26097d3889eeeed0767ae1d197",
"",
"root"
],
[
"e",
"f5531c0da44ecf336ea4e87759eff5501812908ef8d97d1a0e8471119e3bf980",
"",
"reply"
],
[
"p",
"30217b018a47b99ed4c20399b44b02f70ec4f58ed77a2814a563fa28322ef722"
]
],
"content": "📅 Original date posted:2014-09-12\n📝 Original message:On 12 Sep 2014, at 11:55 , bitcoin-development-request at lists.sourceforge.net wrote:\n\n\u003e The hash is meant to link the trust anchor (e.g. the QR code) to the\n\u003e payment request message in a secure way. This will solve the problem\n\u003e several apps are comparing address+amount fields as a workaround\n\u003e instead, preventing some advanced BIP70 usecases. When these apps read a\n\u003e matching hash, they need not compare any of the other fields.\n\nSounds like a good plan.\n\nDo you have a list (possibly incomplete) of apps that perform this kind of checking? We’re currently working with some parties in a supply chain to allow a consumer payment on a retail website to automatically pay supply chain parties, the way BIP70 allows with multiple outputs on a transaction. This behaviour would prohibit this use case.\n\n/Mark",
"sig": "87307807a485bf391c2779a2fccfc41e8cf70af5e12d0a39f4c4247e749b7617d20cd5d01e8ee792df4eb6ce3167fbdc0b1976e016da633600dc87d891a19ee0"
}