delvingbitcoin
Privately sending payments while offline with BOLT12
Posted on: November 10, 2024 19:32 UTC
The discussion centers around the security of implementing LNURL-withdraw links in point-of-sale (POS) devices, specifically comparing two different approaches to integrating this technology.
The first approach is detailed through a reference flow found on GitHub, under the repository theDavidCoen/LNURL-withdrawPOS, which outlines how POS devices can read LNURL-withdraw links via NFC. This method, however, is critiqued for its use of static LNURL withdrawal links, raising concerns about its security.
In contrast, an alternative solution is presented through another GitHub repository, Bolt Card, which proposes the use of deterministic rolling withdrawal URIs combined with a special NFC chip. This method is highlighted as a more secure option, despite acknowledging certain architectural drawbacks associated with LNURL. The comparison suggests a preference towards evolving the technology used in POS devices for handling LNURL-withdraw links, emphasizing the importance of security in such implementations.