原始文献 / 论坛帖 / Re: Hostnames instead of IP Addresses
Re: Hostnames instead of IP Addresses
Bitcointalk · 2010-06-14 19:53:44 UTC
SirArthur 关于普通在线商家场景的观点很对，IP 发送选项更适合的就是这种场景。也就是商家有固定 IP 的服务器、有自己的域名和 SSL 证书的情况。
不用按 IP 连，我们可以按域名走 SSL 连，用现有的 CA 体系认证你连到的是该域名的所有者。
用户发送到 domain.com（www.domain.com（http://www.domain.com）也行）。这很自然，用户能看到、核实自己要付给谁。
SSL 也让 TOR 用户安全了。
问题是，我觉得商家还是更愿意用比特币地址，这样才能确定这笔付款是干嘛的。你根本指望不上用户在备注栏里填对东西来标识交易。除非有 mailto 风格的链接、把订单号预填进备注栏才勉强可行，但那样的链接直接做成比特币地址也一样。
在 domain.com 上开个开放的 bitcoin 服务器、让用户往里打匿名付款，责任太大了。普通用户没有"付款得先标识自己"这个概念。商家会收到一堆空白付款，一周后接着一堆"我付过钱了，我的货呢？！"。
付款流程里有一步是收款方在接受前核验订单。它可以拒绝付款、返回错误信息，如果付款里没有有效订单号的话。但这需要把定制代码跟 bitcoin 服务器做深度的集成，难度不小。
英文原文
SirArthur has a good point about the normal online merchant case, which is what the send-by-IP option is more suited to. This is the case where the merchant will have a server on a static IP and their own domain name and SSL cert.
Instead of connecting by IP, we can connect to a domain name by SSL, using the existing CA infrastructure to authenticate that you're connected to the owner of that domain.
The user would send to domain.com (or www.domain.com（http://www.domain.com） is ok too). That would be very natural and users could see and verify that what they entered is who they intend to pay.
The SSL also makes it safe for TOR users.
Problem is, I think merchants would still prefer to use bitcoin addresses to be certain they know what the payment is for. You simply cannot count on users to enter the right thing in the comment fields to identify the transaction. It would only approach practical if we had a mailto style link that prepopulates the comment field with the order number, but then the link could just as well be a bitcoin address.
Just having an open bitcoin server at domain.com that users could send unidentified payments to would be too much of a liability. Regular users aren't used to the idea of having to identify the payment. Merchants would get too many blank payments followed by "I paid you, where's my stuff?!" a week later.
The payment sequence does have a step where the receiver verifies the order before accepting it. It can reject the payment and return an error message if it doesn't contain a valid order number. That would require a difficult level of integration of custom code with the bitcoin server though.