Discover and read the best of Twitter Threads about #allpay
Most recents (2)
1/ Universal Avatar on Bitcoin & Paymail.
The thread attempts to elucidate the nuances involved regarding on-chain identity, self-sovereignty, security & privacy.
The thread attempts to elucidate the nuances involved regarding on-chain identity, self-sovereignty, security & privacy.
2/ I have great respect for @_unwriter for his significant contributions. This is a focused critique on Bitpic-Paymail solution.
Building a decentralized avatar on Paymail, is building on shaky ground.
Building a decentralized avatar on Paymail, is building on shaky ground.
@_unwriter 3/
The user’s (Paymail PKI) public key is not stored on-chain (cannot as well) and is issued/authorized by the Paymail service provider, while the bitpic provider stores the mapping of paymailID 🡘 publickey 🡘 signed_avatar.
The user’s (Paymail PKI) public key is not stored on-chain (cannot as well) and is issued/authorized by the Paymail service provider, while the bitpic provider stores the mapping of paymailID 🡘 publickey 🡘 signed_avatar.
Consider my humble raise for concern.
#paymail protocol lacks user privacy, restricts user freedom & its security is inadequate. Building on a federated model with heavy reliance on 3rd party API is archaic.
@shadders333 @connolly_dan @ryanxcharles @JamesBelding @derekm00r3
#paymail protocol lacks user privacy, restricts user freedom & its security is inadequate. Building on a federated model with heavy reliance on 3rd party API is archaic.
@shadders333 @connolly_dan @ryanxcharles @JamesBelding @derekm00r3
@shadders333 @connolly_dan @ryanxcharles @JamesBelding @derekm00r3 DNSSEC/ DNS-over-TLS is not a panacea, and it contains many practical issues.
tiny.cc/itotdz
Moreover why should Bitcoin tx. security depend on a centralized top down certificate hierarchy anyway, a new more robust model is possible.
tiny.cc/itotdz
Moreover why should Bitcoin tx. security depend on a centralized top down certificate hierarchy anyway, a new more robust model is possible.
@shadders333 @connolly_dan @ryanxcharles @JamesBelding @derekm00r3 Needing to trust the 3rd party #paymail provider to generate a genuine unique address is unsettling, esp. for high value transactions.
Threats from spoofing, DNS/DNSSEC/TLS vulnerabilities, service provider breach (hacker) or going rogue etc. are real.
Threats from spoofing, DNS/DNSSEC/TLS vulnerabilities, service provider breach (hacker) or going rogue etc. are real.
