Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of
	midnightdesign.ws designates 50.87.144.70 as permitted sender)
	client-ip=50.87.144.70; envelope-from=boydb@midnightdesign.ws;
	helo=gator3054.hostgator.com; 
MIME-Version: 1.0
In-Reply-To: <CANEZrP38p5O+GJ0AsFUHzfuXpR=Z0m2YCZiOy0nFd8jZFuE64A@mail.gmail.com>
References: <CANEZrP3w9c_UX3dd+7LdWNXCEwjnAG+bYWxqKYo_fzakWQu=Bg@mail.gmail.com>
	<CANg-TZBv0zT6PywWJwug0DtzhQkXeE+9nMY14xKAfCysGfgkFg@mail.gmail.com>
	<CANEZrP38p5O+GJ0AsFUHzfuXpR=Z0m2YCZiOy0nFd8jZFuE64A@mail.gmail.com>
Date: Thu, 6 Mar 2014 12:08:51 -0600
Message-ID: <CANg-TZBoafXj6AiNGiT63BfX3iJYo5P3Vdmvxi+RuCODcrh0+w@mail.gmail.com>
From: Brooks Boyd <boydb@midnightdesign.ws>
To: Mike Hearn <mike@plan99.net>
Content-Type: multipart/alternative; boundary=089e010d7efc91962a04f3f4076c
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Instant / contactless payments
Precedence: list

--089e010d7efc91962a04f3f4076c
Content-Type: text/plain; charset=ISO-8859-1

On Thu, Mar 6, 2014 at 11:07 AM, Mike Hearn <mike@plan99.net> wrote:

> if some sort of Stealth address or HD wallet root was the identity gaining
>> the reputation, then address re-use wouldn't have to be mandatory.
>>
> The identity would be the X.520 name in the signing cert that signed the
> payment request. It doesn't have to be a difficult to obtain cert. It could
> even be self signed for this use case, but then you lose the security
> benefits and a key rotation would delete your reputation, so in practice I
> think most people would want the reputation to accrue to the name itself.
>

That makes sense, to have self-signed certificates as a basic start, but
then is it possible to have a Bitcoin user (address) add reputation/sign
such a certificate, rather than having a central signing authority? If
there was a way for a Bitcoin user to provide feedback on a payment (ECDSA
signature from one of the addresses involved in the payment, signing an
identifier of the payment and a feedback score) such that any user can add
to the reputation with just the Bitcoin infrastructure, without having to
learn X.500 certificate signing on top of EC signatures? If there was a
standard structure for a message to be EC-signed with your Bitcoin client,
and then a distributed store of those signed messages, could that form a
reputation score?

--089e010d7efc91962a04f3f4076c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On T=
hu, Mar 6, 2014 at 11:07 AM, Mike Hearn <span dir=3D"ltr">&lt;<a href=3D"ma=
ilto:mike@plan99.net" target=3D"_blank">mike@plan99.net</a>&gt;</span> wrot=
e:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-l=
eft:1px #ccc solid;padding-left:1ex">
<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><div=
 class=3D""><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bo=
rder-left:1px #ccc solid;padding-left:1ex"><p dir=3D"ltr">if some sort of S=
tealth address or HD wallet root was the identity gaining the reputation, t=
hen address re-use wouldn&#39;t have to be mandatory.</p>

</blockquote></div><div>The identity would be the X.520 name in the signing=
 cert that signed the payment request. It doesn&#39;t have to be a difficul=
t to obtain cert. It could even be self signed for this use case, but then =
you lose the security benefits and a key rotation would delete your reputat=
ion, so in practice I think most people would want the reputation to accrue=
 to the name itself.</div>

</div></div></div>
</blockquote></div><br></div><div class=3D"gmail_extra">That makes sense, t=
o have self-signed certificates as a basic start, but then is it possible t=
o have a Bitcoin user (address) add reputation/sign such a certificate, rat=
her than having a central signing authority? If there was a way for a Bitco=
in user to provide feedback on a payment (ECDSA signature from one of the a=
ddresses involved in the payment, signing an identifier of the payment and =
a feedback score) such that any user can add to the reputation with just th=
e Bitcoin infrastructure, without having to learn X.500 certificate signing=
 on top of EC signatures? If there was a standard structure for a message t=
o be EC-signed with your Bitcoin client, and then a distributed store of th=
ose signed messages, could that form a reputation score?</div>
</div>

--089e010d7efc91962a04f3f4076c--