Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of gmail.com
	designates 74.125.82.42 as permitted sender)
	client-ip=74.125.82.42; envelope-from=gavinandresen@gmail.com;
	helo=mail-wg0-f42.google.com; 
MIME-Version: 1.0
In-Reply-To: <lc409d$4mf$1@ger.gmane.org>
References: <lc409d$4mf$1@ger.gmane.org>
Date: Mon, 27 Jan 2014 09:54:09 -0500
Message-ID: <CABsx9T1Y3sO6eS54wsj377BL4rGoghx1uDzD+SY3tTgc1PPbHg@mail.gmail.com>
From: Gavin Andresen <gavinandresen@gmail.com>
To: Andreas Schildbach <andreas@schildbach.de>
Content-Type: multipart/alternative; boundary=f46d041825e24d118104f0f4e17a
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] BIP70: PaymentACK semantics
Precedence: list

--f46d041825e24d118104f0f4e17a
Content-Type: text/plain; charset=ISO-8859-1

On Sun, Jan 26, 2014 at 4:56 PM, Andreas Schildbach
<andreas@schildbach.de>wrote:

> The BIP70 is very brief on what a PaymentACK is supposed to mean. Quote:
>
> "it [PaymentACK] is sent from the merchant's server to the bitcoin
> wallet in response to a Payment message"
>
> Does it simply mean we received a syntactically correct Payment message?
>
Does it mean the Payment is valid?
> Does it mean the Payment is valid and confirmed?
> How long can we delay the ack until all conditions for payment are met?
> I assume its not a good idea to keep the HTTP (or Bluetooth, for that
> matter) connection open for an hour while waiting for a blockchain
> confirmation.
>

The purpose of PaymentACK is to give the customer reassurance that their
payment request has been received and will be processed (or not).

If it is syntactically incorrect or invalid in a way that the payment
processor can detect right away then a PaymentACK with a message saying
that there is a problem should be the response.

Waiting until confirmed is definitely not the right thing to do, but
waiting a few seconds to detect a 0-confirmation double-spend attempt
before sending back an ACK is fine.  The BIP is intentionally vague on how
long it might take to get an ACK, but, again, the intent is to give the
customer reassurance that their payment was received and is being
processed, whatever "processed" means (order sent to shipping for
fulfillment, or awaiting 11 confirmations, or "your burger is paid for you
can leave the restaurant and we won't chase after you").


--
Gavin Andresen

--f46d041825e24d118104f0f4e17a
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On S=
un, Jan 26, 2014 at 4:56 PM, Andreas Schildbach <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:andreas@schildbach.de" target=3D"_blank">andreas@schildbach.de=
</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">The BIP70 is very brief on what a PaymentACK=
 is supposed to mean. Quote:<br>
<br>
&quot;it [PaymentACK] is sent from the merchant&#39;s server to the bitcoin=
<br>
wallet in response to a Payment message&quot;<br>
<br>
Does it simply mean we received a syntactically correct Payment message?<br=
></blockquote><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex">Does it mean the Payment is va=
lid?<br>

Does it mean the Payment is valid and confirmed?<br>
How long can we delay the ack until all conditions for payment are met?<br>
I assume its not a good idea to keep the HTTP (or Bluetooth, for that<br>
matter) connection open for an hour while waiting for a blockchain<br>
confirmation.<br></blockquote><div><br></div><div>The purpose of PaymentACK=
 is to give the customer reassurance that their payment request has been re=
ceived and will be processed (or not).</div><div><br></div><div>If it is sy=
ntactically incorrect or invalid in a way that the payment processor can de=
tect right away then a PaymentACK with a message saying that there is a pro=
blem should be the response.</div>
<div><br></div><div>Waiting until confirmed is definitely not the right thi=
ng to do, but waiting a few seconds to detect a 0-confirmation double-spend=
 attempt before sending back an ACK is fine. =A0The BIP is intentionally va=
gue on how long it might take to get an ACK, but, again, the intent is to g=
ive the customer reassurance that their payment was received and is being p=
rocessed, whatever &quot;processed&quot; means (order sent to shipping for =
fulfillment, or awaiting 11 confirmations, or &quot;your burger is paid for=
 you can leave the restaurant and we won&#39;t chase after you&quot;).</div=
>
<div><br></div><div>=A0</div></div>--<br>Gavin Andresen<br>
</div></div>

--f46d041825e24d118104f0f4e17a--