public inbox for bitcoindev@googlegroups.com
 help / color / mirror / Atom feed
From: Chris D'Costa <chris.dcosta@meek.io>
To: vv01f <vv01f@riseup.net>
Cc: "bitcoin-development@lists.sourceforge.net"
	<bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] secure assigned bitcoin address directory
Date: Mon, 31 Mar 2014 13:14:49 +0200	[thread overview]
Message-ID: <51C10069-5C3B-462A-9184-669ABC6CD9D0@meek.io> (raw)
In-Reply-To: <5339418F.1050800@riseup.net>

Security of transmission of person-to-person pay-to addresses is one of the use cases that we are addressing on our hardware wallet. 

I have yet to finish the paper but in a nutshell it uses a decentralised ledger of, what we refer to as, "device keys". 

These keys are not related in any way to the Bitcoin keys, (which is why I'm hesitating about discussing it here) neither do they even attempt to identify the human owner if the device. But they do have a specific use case and that is to provide "advanced knowledge" of a publickey that can be used for encrypting a message to an intended recipient, without the requirement for a third-party CA, and more importantly without prior dialogue. We think it is this that would allow you to communicate a pay-to address to someone without seeing them in a secure way.

As I understand it the BlockChain uses "time" bought through proof of work to establish a version of the truth, we are using time in the reverse sense : advanced knowledge of all pubkeys. Indeed all devices could easily check their own record to identify problems on the ledger.

There is of course more to this, but I like to refer to the "distributed ledger of device keys" as the "Web-of-trust re-imagined" although that isn't strictly true.

Ok there you have it. The cat is out of the bag, feel free to give feedback, I have to finish the paper, apologies if it is not a topic for this list.

Regards

Chris D'Costa


> On 31 Mar 2014, at 12:21, vv01f <vv01f@riseup.net> wrote:
> 
> Some users on bitcointalk[0] would like to have their vanity addresses
> available for others easily to find and verify the ownership over a kind
> of WoT. Right now they sign their own addresses and quote them in the
> forums.
> As I pointed out there already the centralized storage in the forums is
> not secury anyhow and signed messages could be swapped easily with the
> next hack of the forums.
> 
> Is that use case taken care of in any plans already?
> 
> I thought about abusing pgp keyservers but that would suit for single
> vanity addresses only.
> It seems webfinger could be part of a solution where servers of a
> business can tell and proof you if a specific address is owned by them.
> 
> [0] https://bitcointalk.org/index.php?topic=502538
> [1] https://bitcointalk.org/index.php?topic=505095
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development



  parent reply	other threads:[~2014-03-31 11:26 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-03-31 10:21 [Bitcoin-development] secure assigned bitcoin address directory vv01f
2014-03-31 10:49 ` Natanael
2014-03-31 11:14 ` Chris D'Costa [this message]
2014-03-31 11:46   ` Natanael
2014-03-31 16:53     ` Chris D'Costa
2014-04-01 11:32   ` Jeff Garzik
2014-04-01 12:20     ` Chris D'Costa
2014-04-01 18:16       ` Daryl Banttari
2014-04-01 22:26         ` Chris D'Costa
2014-04-02  0:59           ` Daryl Banttari
2014-04-02  5:16             ` Chris D'Costa
2014-04-02 12:01             ` Mike Hearn
2014-03-31 11:21 ` Peter Todd
2014-03-31 17:07 ` Jeff Garzik
2014-03-31 18:57   ` Roy Badami
2014-04-01  8:13     ` Chris D'Costa

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=51C10069-5C3B-462A-9184-669ABC6CD9D0@meek.io \
    --to=chris.dcosta@meek.io \
    --cc=bitcoin-development@lists.sourceforge.net \
    --cc=vv01f@riseup.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox