Skip to content

回复:用主机名代替 IP 地址 ​

原始发布页

打开来源页面
查看 1 个交叉存档

SirArthur 对普通在线商家的情况提出了一个很好的观点,而通过 IP 发送这个选项更适合的正是这种情况。在这种情况下,商家会有一台使用静态 IP 的服务器,以及自己的域名和 SSL 证书。

我们可以不通过 IP 连接,而是通过 SSL 连接到域名,并利用现有的 CA 基础设施来验证你连接的确实是该域名的所有者。

用户可以向 domain.com 发送(或者 www.domain.com 也可以)。这会非常自然,用户也可以看到并确认自己输入的对象就是打算付款的对象。

SSL 也能让 TOR 用户安全使用。

问题是,我认为商家仍会更愿意使用比特币地址,以确保他们知道这笔付款是付什么的。你根本不能指望用户在备注字段中输入正确的内容来标识交易。除非我们有一种类似 mailto 的链接,能用订单号预先填好备注字段,否则这几乎不具备实用性;但这样的话,链接完全也可以直接是一个比特币地址。

仅仅在 domain.com 开放一台比特币服务器,让用户向其发送无法识别的付款,会带来太大的责任风险。普通用户并不习惯必须标识付款这件事。商家会收到太多没有备注的付款,然后一周后又有人问:“我付过钱了,我的东西呢?!”

付款流程中确实有一步是接收方在接受付款前核验订单。如果付款不包含有效的订单号,它可以拒绝付款并返回错误消息。不过,这将要求以相当困难的深度把自定义代码与比特币服务器集成起来。

英文原文 ​

展开英文原文

SirArthur has a good point about the normal online merchant case, which is what the send-by-IP option is more suited to. This is the case where the merchant will have a server on a static IP and their own domain name and SSL cert.

Instead of connecting by IP, we can connect to a domain name by SSL, using the existing CA infrastructure to authenticate that you're connected to the owner of that domain.

The user would send to domain.com (or www.domain.com is ok too). That would be very natural and users could see and verify that what they entered is who they intend to pay.

The SSL also makes it safe for TOR users.

Problem is, I think merchants would still prefer to use bitcoin addresses to be certain they know what the payment is for. You simply cannot count on users to enter the right thing in the comment fields to identify the transaction. It would only approach practical if we had a mailto style link that prepopulates the comment field with the order number, but then the link could just as well be a bitcoin address.

Just having an open bitcoin server at domain.com that users could send unidentified payments to would be too much of a liability. Regular users aren't used to the idea of having to identify the payment. Merchants would get too many blank payments followed by "I paid you, where's my stuff?!" a week later.

The payment sequence does have a step where the receiver verifies the order before accepting it. It can reject the payment and return an error message if it doesn't contain a valid order number. That would require a difficult level of integration of custom code with the bitcoin server though.

为历史保存,为中文读者整理。每篇档案均附来源与英文原文。