1
0
mirror of https://github.com/bitcoin/bips.git synced 2025-05-12 12:03:29 +00:00

Added note about handling multiple copies of a Payment message, to ensure resend is safe

in case of a transport layer failure.
This commit is contained in:
Ross Nicoll 2014-04-26 16:59:23 +01:00
parent 694314d296
commit d8bd74baf8
No known key found for this signature in database
GPG Key ID: 9142E5F7E533CE3B

View File

@ -156,6 +156,11 @@ If the customer authorizes payment, then the Bitcoin client:
# If PaymentDetails.payment_url is specified, POST a Payment message to that URL. The Payment message is serialized and sent as the body of the POST request.
Errors communicating with the payment_url server should be communicated to the user.
The merchant's server should handle receiving multiple copies of the same Payment
message in response to a single PaymentRequest. This is required to ensure that in
case of a transport level failure during transmission, recovery is possible by
re-sending the Payment message. The endpoint URL must remain valid for at least
the same period of time as the original PaymentRequest.
PaymentDetails.payment_url should be secure against man-in-the-middle
attacks that might alter Payment.refund_to (if using HTTP, it must be