taler
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Taler] repurchase detection


From: Jeff Burdges
Subject: Re: [Taler] repurchase detection
Date: Fri, 19 Feb 2016 17:42:11 +0100

On Fri, 2016-02-19 at 16:13 +0100, Christian Grothoff wrote:
> > Should we use the hostname of the fulfillment URL?  The hostname of
> the
> > site that offered the contract (with taler-confirm-contract) in the
> > first place?  What if the merchant's hostname changes?
> 
> It's much simpler. The contract proposals are signed by the
> merchant's
> public key, so just include the merchant's public key.

We might need the hostname as well, I think.  

We've reasonable measures against abusing repurchase detection for
tracking, but one should always avoid spreading data between hostnames.

Jeff

Attachment: signature.asc
Description: This is a digitally signed message part


reply via email to

[Prev in Thread] Current Thread [Next in Thread]