My company develops payment plugins for Magento Commerce. I'm about to release a free Bitcoin (JSON-RPC) extension (
http://www.magentocommerce.com/magento-connect/catalog/product/view/id/17305/; once approved).
I have a question concerning best practices of accounts versus addresses. In my implementation I decided to use a unique
account for each
order number. This way I could track using
bitcoind getreceivedbyaccount, even if there are multiple address (is possible). So I create a unique address for each payment attempt, stored under a wallet account for the order number.
For example:
- checkout attempt #1: order ABC = account ABC, address 123
- customer cancels
- checkout attempt #2: order ABC = account ABC, address
456 (new attempt, different
address, but same account)
The hierarchy is like this:
Bitcoin wallet = Store
- Account x = Order
- Address y = Payment attempt
However, order numbers are linked to addresses in Magento. Is this considered a privacy concern?
Can anyone suggest a "best practice" for Bitcoin wallets, accounts and addresses?