原始文献 / 论坛帖 / Re: A newb's test - anyone want to buy a picture for $1?

Re: A newb's test - anyone want to buy a picture for $1?

Bitcointalk · 2010-01-29 00:22:13 UTC

AuthorSatoshi Nakamoto
TitleRe: A newb's test - anyone want to buy a picture for $1?
Date2010-01-29 00:22:13 UTC
ForumBitcointalk · 原文

订单付款的推荐做法:
1) 商家有固定 IP,顾客发到它并附上留言。
2) 商家创建一个新的比特币地址给顾客,顾客发到这个地址。这会是网站软件的标准做法。

RSA vs ECDSA:不是可执行文件的体积问题,是数据的体积。我觉得如果区块链、比特币地址、磁盘空间和带宽需求都大一个数量级,就不切实际了。而且就算用 RSA 传消息,比特币网络本身还是用 ECDSA 合理,只在消息部分并行用 RSA。那样的话,到目前为止实现的东西会原样保留。

我们可以晚得多再想怎么做最好。它可以用另一套(也许现成的)邮件或即时通讯基础设施来传消息,不用 RSA 也行,也许只在交易里放消息的哈希,证明这笔交易对应消息里描述的订单。消息里得加盐,不然别人可以暴力破解哈希,还原出短消息。

英文原文

The recommended ways to do a payment for an order:
1) The merchant has a static IP, the customer sends to it with a comment.
2) The merchant creates a new bitcoin address, gives it to the customer, the customer sends to that address.  This will be the standard way for website software to do it.

RSA vs ECDSA: it's not the size of the executable but the size of the data.  I thought it would be impractical if the block chain, bitcoin addresses, disk space and bandwidth requirements were all an order of magnitude bigger.  Also, even if using RSA for messages, it would still make sense to do all the bitcoin network with ECDSA and use RSA in parallel for only the message part.  In that case, everything that's been implemented up to now would be implemented exactly as it has been.

We can figure out the best way to do this much later.  It could use a separate (maybe existing) e-mail or IM infrastructure to pass messages, and instead of RSA, maybe just put a hash of the message in the transaction to prove that the transaction is for the order described in the message.  The message would have to include a salt so nobody could brute force the hash to reveal a short message.