The Logistics of Accepting Bitcoin Donations?

Gavin Andresen

legendary

Activity: 1652

Merit: 2301

Chief Scientist

Quote from: carbonpenguin on May 17, 2011, 01:36:46 PM

I'd read somewhere it was vulnerable to a "man-in-the-middle" attack. Not sure what that means, but I figured it'd be good to be careful.

To be completely sure you get all the donations you deserve, you should put the donation address on an https:// page.

Otherwise hackers can hijack http: pages if they can insert themselves into the network between you and your web visitors, and replace the donation address on the webpage with their bitcoin address.

rezin777

full member

Activity: 154

Merit: 100

Quote from: kiba on May 17, 2011, 01:37:52 PM

Quote from: carbonpenguin on May 17, 2011, 01:36:46 PM

I'd read somewhere it was vulnerable to a "man-in-the-middle" attack. Not sure what that means, but I figured it'd be good to be careful.

Well, if somebody can modify your web page without permission, than it is vulnerable to a "man-in-the-middle" attack.

Meaning they can change your address to their address and donations that were meant for you will go to them.

kiba

legendary

Activity: 980

Merit: 1020

Quote from: carbonpenguin on May 17, 2011, 01:36:46 PM

I'd read somewhere it was vulnerable to a "man-in-the-middle" attack. Not sure what that means, but I figured it'd be good to be careful.

Well, if somebody can modify your web page without permission, than it is vulnerable to a "man-in-the-middle" attack.

carbonpenguin

full member

Activity: 236

Merit: 100

I'd read somewhere it was vulnerable to a "man-in-the-middle" attack. Not sure what that means, but I figured it'd be good to be careful.

bittersweet

full member

Activity: 222

Merit: 100

Quote from: carbonpenguin on May 17, 2011, 01:03:31 PM

I was going to just put an address on my blog, but I remember reading somewhere that doing so is a bad security practice.

For donations? It's not. Unless you don't want other people to know how much donations you received.
If you use a single address for all donations it can be easily checked.

If you sell something it gets more complicated because you must be sure who paid you.

carbonpenguin

full member

Activity: 236

Merit: 100

Nice - I'll give that a try.

edd

donator

Activity: 1414

Merit: 1002

I used the mybitcoin merchant tools to create an encrypted link (see the Tip Jar at the top of the BitBrew site).

carbonpenguin

full member

Activity: 236

Merit: 100

I was going to just put an address on my blog, but I remember reading somewhere that doing so is a bad security practice. Is there a simple plug-and-play widget out there that generates random addresses that would be easy to put on a blogspot blog?

Topic: The Logistics of Accepting Bitcoin Donations? (Read 1364 times)