Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.219.53 as permitted sender)
	client-ip=209.85.219.53; envelope-from=mh.in.england@gmail.com;
	helo=mail-oa0-f53.google.com; 
MIME-Version: 1.0
Sender: mh.in.england@gmail.com
In-Reply-To: <0887034B-AA65-468B-A8DB-4DF1E6C27DA2@gmail.com>
References: <0887034B-AA65-468B-A8DB-4DF1E6C27DA2@gmail.com>
Date: Sun, 10 Nov 2013 12:08:38 +0100
Message-ID: <CANEZrP0tAb0G700qXhmWJ4ChEfys87KCwUp1CAUQ9sfyHOCxbQ@mail.gmail.com>
From: Mike Hearn <mike@plan99.net>
To: Taylor Gerring <taylor.gerring@gmail.com>
Content-Type: multipart/alternative; boundary=001a11c2903c36192b04ead0a3ec
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Extending the Payment Protocol with vCards
Precedence: list

--001a11c2903c36192b04ead0a3ec
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hey Taylor,

It's great to see people thinking about payment protocol extensions. I'm
not totally convinced vCard support is the best idea relative to social
network integration - I can't recall the last time I saw someone use a
vCard. However, that should not hold you back from experimenting or
prototyping. All an extension requires is some tag numbers and we're not in
danger of running out of numbers any time soon.

The reason I favour social network integration is because those are the
ID's people already have. Distributed social networks (like the PGP web of
trust) have never really taken off, and fixing that is an entirely separate
project to Bitcoin.

Doing so is quite easy. Major social networks all have a concept of a user
ID, moreover, one that can be queried without any kind of API authorization
for basic info. Examples:

https://graph.facebook.com/i.am.the.real.mike
https://plus.google.com/s2/u/0/photos/profile/114798402540078632611

So you could simply embed a social network URL into a payment request, and
use that to associate a name/photo with a payment. That would be
unauthenticated (the sender is not proving they are the real owner of the
social network profile). However, authentication may not turn out to be
necessary. If it were to be, then steganographically embedding a key into
the profile picture and signing the payment request with it would be a way
to do so.


On Sat, Nov 9, 2013 at 6:43 PM, Taylor Gerring <taylor.gerring@gmail.com>wr=
ote:

> Hi everyone,
>
> I made a post on the BitcoinTalk forums <
> https://bitcointalk.org/index.php?topic=3D329229.0> outlining how the
> Payment Protocol could be extended with optional vCard support to increas=
e
> the usability of Payment Protocol for user-to-user transactions and impro=
ve
> the user experience in wallets supporting PP.
>
> I=E2=80=99ve outlined the concept in as much detail as my feeble brain ca=
n handle,
> drawing on BIP 0070 itself and Mike Hearn=E2=80=99s Payment Protocol FAQ.=
 I know
> there is interest in =E2=80=9Ccontact exchange=E2=80=9D functionality fro=
m the Hive team,
> so I=E2=80=99m hoping this will begin a discussion on how we can make wal=
lets more
> friendly in a standard way.
>
> Please read, digest, and let me know if you have any feedback.
>
> Thanks,
>
> Taylor Gerring
>
>
>
>
>
> -------------------------------------------------------------------------=
-----
> November Webinars for C, C++, Fortran Developers
> Accelerate application performance with scalable programming models.
> Explore
> techniques for threading, error checking, porting, and tuning. Get the mo=
st
> from the latest Intel processors and coprocessors. See abstracts and
> register
> http://pubads.g.doubleclick.net/gampad/clk?id=3D60136231&iu=3D/4140/ostg.=
clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>

--001a11c2903c36192b04ead0a3ec
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hey Taylor,<div><br></div><div>It&#39;s great to see peopl=
e thinking about payment protocol extensions. I&#39;m not totally convinced=
 vCard support is the best idea relative to social network integration - I =
can&#39;t recall the last time I saw someone use a vCard. However, that sho=
uld not hold you back from experimenting or prototyping. All an extension r=
equires is some tag numbers and we&#39;re not in danger of running out of n=
umbers any time soon.</div>
<div><br></div><div>The reason I favour social network integration is becau=
se those are the ID&#39;s people already have. Distributed social networks =
(like the PGP web of trust) have never really taken off, and fixing that is=
 an entirely separate project to Bitcoin.</div>
<div><br></div><div>Doing so is quite easy. Major social networks all have =
a concept of a user ID, moreover, one that can be queried without any kind =
of API authorization for basic info. Examples:</div><div><br></div><div>
<a href=3D"https://graph.facebook.com/i.am.the.real.mike">https://graph.fac=
ebook.com/i.am.the.real.mike</a></div><div><a href=3D"https://plus.google.c=
om/s2/u/0/photos/profile/114798402540078632611">https://plus.google.com/s2/=
u/0/photos/profile/114798402540078632611</a><br>
</div><div><br></div><div>So you could simply embed a social network URL in=
to a payment request, and use that to associate a name/photo with a payment=
. That would be unauthenticated (the sender is not proving they are the rea=
l owner of the social network profile). However, authentication may not tur=
n out to be necessary. If it were to be, then steganographically embedding =
a key into the profile picture and signing the payment request with it woul=
d be a way to do so.</div>
</div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Sat,=
 Nov 9, 2013 at 6:43 PM, Taylor Gerring <span dir=3D"ltr">&lt;<a href=3D"ma=
ilto:taylor.gerring@gmail.com" target=3D"_blank">taylor.gerring@gmail.com</=
a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Hi everyone,<br>
<br>
I made a post on the BitcoinTalk forums &lt;<a href=3D"https://bitcointalk.=
org/index.php?topic=3D329229.0" target=3D"_blank">https://bitcointalk.org/i=
ndex.php?topic=3D329229.0</a>&gt; outlining how the Payment Protocol could =
be extended with optional vCard support to increase the usability of Paymen=
t Protocol for user-to-user transactions and improve the user experience in=
 wallets supporting PP.<br>

<br>
I=E2=80=99ve outlined the concept in as much detail as my feeble brain can =
handle, drawing on BIP 0070 itself and Mike Hearn=E2=80=99s Payment Protoco=
l FAQ. I know there is interest in =E2=80=9Ccontact exchange=E2=80=9D funct=
ionality from the Hive team, so I=E2=80=99m hoping this will begin a discus=
sion on how we can make wallets more friendly in a standard way.<br>

<br>
Please read, digest, and let me know if you have any feedback.<br>
<br>
Thanks,<br>
<br>
Taylor Gerring<br>
<br>
<br>
<br>
<br>-----------------------------------------------------------------------=
-------<br>
November Webinars for C, C++, Fortran Developers<br>
Accelerate application performance with scalable programming models. Explor=
e<br>
techniques for threading, error checking, porting, and tuning. Get the most=
<br>
from the latest Intel processors and coprocessors. See abstracts and regist=
er<br>
<a href=3D"http://pubads.g.doubleclick.net/gampad/clk?id=3D60136231&amp;iu=
=3D/4140/ostg.clktrk" target=3D"_blank">http://pubads.g.doubleclick.net/gam=
pad/clk?id=3D60136231&amp;iu=3D/4140/ostg.clktrk</a><br>___________________=
____________________________<br>

Bitcoin-development mailing list<br>
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develo=
pment@lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/bitcoin-development=
" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-de=
velopment</a><br>
<br></blockquote></div><br></div>

--001a11c2903c36192b04ead0a3ec--