BIP70

BIP70, also known as Payment Protocol, is a proposed standard for improving the security and user experience of Bitcoin payments. It aims to address some of the limitations of the original Bitcoin payment process, which relied on simply sharing a Bitcoin address.

The core idea behind BIP70 is to establish a secure communication channel between a merchant and a customer. Instead of just providing a Bitcoin address, a merchant using BIP70 would present a payment request. This request would be a structured data file, often in a format like JSON, that contains all the necessary information for the customer to make the payment. This includes the exact amount to be paid, the recipient's Bitcoin address, and potentially other details like a memo or invoice number.

Crucially, BIP70 payment requests are digitally signed by the merchant, allowing the customer's wallet to verify the authenticity of the request and ensure it hasn't been tampered with. This significantly reduces the risk of phishing attacks where a malicious actor might intercept a Bitcoin address and redirect funds to themselves.

When a customer's wallet receives a BIP70 payment request, it can automatically populate the payment details, reducing the chance of manual entry errors. The wallet can then send the payment directly to the specified address. BIP70 also defines a mechanism for the merchant to notify the customer about the payment status, such as confirmation or rejection.

While BIP70 offered significant improvements, its adoption has been limited. Challenges include the need for wallet and merchant support, as well as potential complexities in implementation. Despite this, the principles behind BIP70 have influenced subsequent developments in Bitcoin payment protocols.