summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--bip-0070.mediawiki5
1 files changed, 5 insertions, 0 deletions
diff --git a/bip-0070.mediawiki b/bip-0070.mediawiki
index 84a8559..b541cbc 100644
--- a/bip-0070.mediawiki
+++ b/bip-0070.mediawiki
@@ -156,6 +156,11 @@ If the customer authorizes payment, then the Bitcoin client:
# If PaymentDetails.payment_url is specified, POST a Payment message to that URL. The Payment message is serialized and sent as the body of the POST request.
Errors communicating with the payment_url server should be communicated to the user.
+The merchant's server should handle receiving multiple copies of the same Payment
+message in response to a single PaymentRequest. This is required to ensure that in
+case of a transport level failure during transmission, recovery is possible by
+re-sending the Payment message. The endpoint URL must remain valid for at least
+the same period of time as the original PaymentRequest.
PaymentDetails.payment_url should be secure against man-in-the-middle
attacks that might alter Payment.refund_to (if using HTTP, it must be