Skip to content

Commit

Permalink
Merge pull request #131 from drupalnomad/patch-1
Browse files Browse the repository at this point in the history
Mention that "Unsecure money receiver" use-case prevents theft
  • Loading branch information
laanwj committed Mar 11, 2015
2 parents ced361d + d201d13 commit 2ea19da
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion bip-0032.mediawiki
Original file line number Diff line number Diff line change
Expand Up @@ -178,7 +178,7 @@ Such a mechanism could also be used by mining pool operators as variable payout

====Unsecure money receiver: N(m/i<sub>H</sub>/0)====

When an unsecure webserver is used to run an e-commerce site, it needs to know public addresses that are used to receive payments. The webserver only needs to know the public extended key of the external chain of a single account. This means someone illegally obtaining access to the webserver can at most see all incoming payments, but will not (trivially) be able to distinguish outgoing transactions, nor see payments received by other webservers if there are several ones.
When an unsecure webserver is used to run an e-commerce site, it needs to know public addresses that are used to receive payments. The webserver only needs to know the public extended key of the external chain of a single account. This means someone illegally obtaining access to the webserver can at most see all incoming payments but will not be able to steal the money, will not (trivially) be able to distinguish outgoing transactions, nor be able to see payments received by other webservers if there are several.

==Compatibility==

Expand Down

0 comments on commit 2ea19da

Please sign in to comment.