Re: [Taler] repurchase detection

[Jeff Burdges]

On Fri, 2016-02-19 at 16:13 +0100, Christian Grothoff wrote:
> > Should we use the hostname of the fulfillment URL?  The hostname of
> the
> > site that offered the contract (with taler-confirm-contract) in the
> > first place?  What if the merchant's hostname changes?
> 
> It's much simpler. The contract proposals are signed by the
> merchant's
> public key, so just include the merchant's public key.

We might need the hostname as well, I think.  

We've reasonable measures against abusing repurchase detection for
tracking, but one should always avoid spreading data between hostnames.

Jeff

signature.asc
Description: This is a digitally signed message part