What is BIP-70 and why is it controversial? Why doesn’t BitPay implement the more universal BIP-21?

More on BIP-70: https://github.com/bitcoin/bips/blob/master/bip-0070.mediawiki

More on BIP-21: https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki

Note: This video was recorded prior to James Hilliard’s post that he has discovered “a class of BIP70 implementation flaws that have a security impact,” which was not discussed here but developments are being followed: https://twitter.com/james_hilliard/status/1065488927258116097

Deprecation warnings were recently merged for Bitcoin Core: https://github.com/bitcoin-dot-org/bitcoin.org/pull/2759

This question is from the October monthly Patreon session, which took place on October 27th 2018. If you want early-access to talks and a chance to participate in the monthly live Q&As with Andreas, become a patron: https://www.patreon.com/aantonop

RELATED:
Advanced Bitcoin Scripting, Part 1: Transactions and Multisig – https://youtu.be/8FeAXjkmDcQ
Advanced Bitcoin Scripting, Part 2: SegWit, Consensus, and Trustware – https://youtu.be/pQbeBduVQ4I
CVE-2018-17144 vulnerability – https://youtu.be/5GD0kGT0SU0
Migrating to post-quantum cryptography
What is a private key? – https://youtu.be/xxfUpIV9wRI
Public keys vs. addresses – https://youtu.be/8es3qQWkEiU
Protocol development security – https://youtu.be/4fsL5XWsTJ4
Software distribution security – https://youtu.be/_V0vqy046YM
Lightning’s security model – https://youtu.be/_GNsT_ufkec
Misconceptions about the Lightning Network – https://youtu.be/c4TjfaLgzj4
Eltoo, and the early days of Lightning – https://youtu.be/o6eFZ5aI9N0
Lightning Network scaling – https://youtu.be/4KiWkwo48k0
Lightning Network interoperability – https://youtu.be/1HYMWcJHGXc
Lightning Network game theory – https://youtu.be/7if0DuTtozY
Atomic swaps – https://youtu.be/fNFBA2UmUmg
Full node and home network security – https://youtu.be/uo58zmyXqFY
Running nodes and payment channels – https://youtu.be/ndcfBfE_yoY
What is Segregated Witness (SegWit)? – https://youtu.be/dtOjjB4mD8k
SegWit and fork research – https://youtu.be/OorLoi01KEE

Andreas M. Antonopoulos is a technologist and serial entrepreneur who has become one of the most well-known and respected figures in bitcoin.

Follow on Twitter: @aantonop https://twitter.com/aantonop
Website: https://antonopoulos.com/

He is the author of two books: “Mastering Bitcoin,” published by O’Reilly Media and considered the best technical guide to bitcoin; “The Internet of Money,” a book about why bitcoin matters.

Subscribe to the channel to learn more about Bitcoin & open blockchains; click on the red bell to enable notifications about new videos!

MASTERING BITCOIN, 2nd Edition: https://amzn.to/2xcdsY9

Translations of MASTERING BITCOIN: https://bitcoinbook.info/translations-of-mastering-bitcoin/

THE INTERNET OF MONEY, v1: https://amzn.to/2ykmXFs

THE INTERNET OF MONEY, v2: https://amzn.to/2IIG5BJ

Translations of THE INTERNET OF MONEY:
Spanish, ‘Internet del Dinero’ (v1) – https://amzn.to/2yoaTTq
French, ‘L’internet de l’argent’ (v1) – https://www.amazon.fr/Linternet-largent-Andreas-M-Antonopoulos/dp/2856083390
Russian, ‘Интернет денег’ (v1) – https://www.olbuss.ru/catalog/ekonomika-i-biznes/korporativnye-finansy-bankovskoe-delo/internet-deneg
Vietnamese, ‘Internet Của Tiền Tệ’ (v1) – https://alphabooks.vn/khi-tien-len-mang

MASTERING ETHEREUM (Q4): https://amzn.to/2xdxmlK

Music: “Unbounded” by Orfan (https://www.facebook.com/Orfan/)
Outro Graphics: Phneep (http://www.phneep.com/)
Outro Art: Rock Barcellos (http://www.rockincomics.com.br/)

source

15 COMMENTS

  1. BitPay is baaad :/ Because they do not approve our business, they essentially kicked us out and refused to give out the last 0.16BTC or so. They dropped us to 0 level after years.

    BitPay is no better than Paypal really.

  2. Ανδρεα χρονια πολλα με υγιεια να χαιρεσαι τι ονομα σου
    να σε χαιρεται η οικογενεια σου ευχομαι οτι επιθυμεις
    ασχετο με το θεμα…¨)

  3. "Political reasons" isn't a meaningful phrase. Politics is violent coercion, not campaigning or promotion of an idea. Why do people conflate these things? To obfuscate the violence inherent in politics, at worst; or because of ignorance at best. People like to think voting isn't violence; It is. Promoting and marketing for a group or individual goal is not "politics", because they don't incite the power of the state.

  4. If you can hijack the browser to inject javascript and replace the address with your own, then you can inject HTML that displays a green lock symbol when it's not valid. There needs to be a two-way dialogue between cllients to ensure trust on both sides.

  5. To me, "BIP70 only" is kind of a pain with BitPay, but it's not the reason that I dislike them. I dislike them because they add huge additional fees which they state through slightly confusing and definitely misleading wording are "network fees" (implying it's a miner fee) when in reality it's their own service fee.
    I honestly don't mind if a centralised 3rd party payment provider has their own fees – they're a company and need to make money after all – but they should be up-front about it. Pretending that it's something it's not makes it harder for the merchant to make an informed decision when deciding which payment processor (if they're going to use a 3rd party payment processor at all) to work with and misleads users in to thinking that these outrageous fees are normal and expected when paying with bitcoin, which they most certainly aren't.

LEAVE A REPLY

Please enter your comment!
Please enter your name here