Skip to content
This repository has been archived by the owner on Sep 6, 2018. It is now read-only.

Add support for CryptoTari; add Stellar token address validator #19

Closed
wants to merge 1 commit into from

Conversation

litlp007
Copy link
Contributor

The address validator is designed to be reusable by other stellar tokens.

Copy link
Collaborator

@blabno blabno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

NACK per comment.

public static String getText(String url) throws Exception {
URL website = new URL(url);
URLConnection connection = website.openConnection();
BufferedReader in = new BufferedReader(
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we want to make any external queries to validate anything.
Validation must work offline.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

External requests are not permitted!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the quick response.
I understand your position, but let me explain the situation a bit more so you may reconsider.

The ripple/stellar network works in a way that there is no way to tell offline whether a specific address can receive a specific token or not (an account needs to set up a "trust line" before it can hold a specific token).
We could validate the address syntax offline but if someone would buy the token without the established trust line then the seller would not be able to transfer the tokens even if he/she wanted to and the deal would go straight to arbitration (as the seller could not contact the buyer directly to tell him/her to establish the needed trust).

Given the above would you reconsider the rejection - or suggest an alternative?

Thanks!

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the explanation. I still would prefer than the offline online validation and risk some arbitration cases rather to can clear-net URL connections. All network connection in Bisq run over Tor to avoid leaking the IP via clear-net calls.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, I got your point now. I will make a new pull request with offline validation.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants