References: <CABdy8DKS4arkkCLGC=66SUJm5Ugib1EWP7B6MkQRX1k-yd3WBw@mail.gmail.com>
	<CANEZrP3v=ySS4gragaWuBMWi_swocRRRq_kw2edo6+9kifgrFQ@mail.gmail.com>
	<54D3D636.1030308@voskuil.org>
	<CANEZrP3ekWQWeV=Yw_E=n0grORBLHaXLUh3w0EFQdz=HsjWvZw@mail.gmail.com>
	<CABdy8DKdJt+KpU5eaPyB_p6PX3wet2ZgWa-X0gHgPhNXC+HYiw@mail.gmail.com>
Mime-Version: 1.0 (1.0)
In-Reply-To: <CABdy8DKdJt+KpU5eaPyB_p6PX3wet2ZgWa-X0gHgPhNXC+HYiw@mail.gmail.com>
Content-Type: multipart/alternative;
	boundary=Apple-Mail-471BA261-CD5F-480F-89A2-32F8B652507C
Content-Transfer-Encoding: 7bit
Message-Id: <87E6D928-B615-4A8D-8BBB-3610DB1C08A2@voskuil.org>
From: Eric Voskuil <eric@voskuil.org>
Date: Thu, 5 Feb 2015 14:05:39 -0800
To: Paul Puey <paul@airbitz.co>
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Proposal for P2P Wireless (Bluetooth LE)
	transfer of Payment URI
Precedence: list


--Apple-Mail-471BA261-CD5F-480F-89A2-32F8B652507C
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Hi Paul,

The issue is in the establishment of trust. Anyone can broadcast the initial=
 information.

e

> On Feb 5, 2015, at 2:01 PM, Paul Puey <paul@airbitz.co> wrote:
>=20
> The broadcast is ONLY done when the wallet is in Receive mode. Same as whe=
n the QR code is visible. The use of the *Name* section is specifically so t=
hat a recipient can broadcast their name/handle. Not so the recipient would b=
roadcast the name of the Sender.
>=20
> On Thu, Feb 5, 2015 at 12:50 PM, Mike Hearn <mike@plan99.net> wrote:
>>> I'm imagining myself walking around broadcasting my photo and MAC
>>> address while hucksters push payment requests to me for approval
>>=20
>> I hate to break it to you, but you broadcast a photo of your face every t=
ime you walk outside ;)
>>=20
>> Bluetooth MAC addresses are random, they aren't useful identifiers. If so=
meone can see you, a face is a far more uniquely identifying thing than a MA=
C.
>>=20
>> "Payment spam" might be a problem. I can imagine a wallet requiring that s=
uch requests are signed and then spammers can be blacklisted in the usual fa=
shion so they can't push things to your phone anymore. Anyway, a hurdle that=
 can be jumped if/when it becomes an issue.
>=20

--Apple-Mail-471BA261-CD5F-480F-89A2-32F8B652507C
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: 7bit

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Hi Paul,</div><div><br></div><div>The issue is in the establishment of trust. Anyone can broadcast the initial information.<br><br>e</div><div><br>On Feb 5, 2015, at 2:01 PM, Paul Puey &lt;<a href="mailto:paul@airbitz.co">paul@airbitz.co</a>&gt; wrote:<br><br></div><blockquote type="cite"><div dir="ltr">The broadcast is ONLY done when the wallet is in Receive mode. Same as when the QR code is visible. The use of the *Name* section is specifically so that a recipient can broadcast their name/handle. Not so the recipient would broadcast the name of the Sender.</div><div class="gmail_extra">
<br><div class="gmail_quote">On Thu, Feb 5, 2015 at 12:50 PM, Mike Hearn <span dir="ltr">&lt;<a href="mailto:mike@plan99.net" target="_blank">mike@plan99.net</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I'm imagining myself walking around broadcasting my photo and MAC<br>
address while hucksters push payment requests to me for approval</blockquote><div><br></div><div>I hate to break it to you, but you broadcast a photo of your face every time you walk outside ;)</div><div><br></div><div>Bluetooth MAC addresses are random, they aren't useful identifiers. If someone can see you, a face is a far more uniquely identifying thing than a MAC.</div><div><br></div><div>"Payment spam" might be a problem. I can imagine a wallet requiring that such requests are signed and then spammers can be blacklisted in the usual fashion so they can't push things to your phone anymore. Anyway, a hurdle that can be jumped if/when it becomes an issue.</div></div></div></div>
</blockquote></div><br></div>
</blockquote></body></html>
--Apple-Mail-471BA261-CD5F-480F-89A2-32F8B652507C--