Tell me more ×
Bitcoin Stack Exchange is a question and answer site for Bitcoin crypto-currency enthusiasts. It's 100% free, no registration required.

This question asks about how to work with bitcoin via an API without requiring a local blockchain. The only answer is about blockchain.info's JSON API, but it appears that unlike the web version of blockchain.info, the JSON API requires the account passwords to be sent to the server.

Is there another remote API that allows one to perform various bitcoin operations without compromising security - without sending private keys anywhere, but rather signing transactions locally? The API should not require any downloads - SPV does not fall under this category - but should just be a remote API to the bitcoin network that doesn't require any state / bootstrap from its client.

If I recall correctly then Stratum was supposed to be this API. Did it ever take off?

share|improve this question
Also on bitciontalk - bitcointalk.org/index.php?topic=144347.0 – ripper234 Feb 15 at 16:34
I'm not sure how you want it to be trustless if you don't want to validate anything locally? – Pieter Wuille Feb 15 at 18:40
@PieterWuille - I am willing to trust that a remote node is not lying to me (I need to carefully choose that node/s). However, I do not want that node to know my private keys - instead, I'll sign transactions locally and send the signed tx to the node. – ripper234 Feb 16 at 6:36

2 Answers

up vote 1 down vote accepted

There are quite a few answers in the bitcointalk thread. This is what I consider to be the best option:

  1. Using blockchain.info for queries
  2. Using bitcoinj to sign transactions
  3. Using blockchain.info broadcast API to broadcast transactions

This class from the the android version of My Wallet is supposed to implement this scheme.

share|improve this answer

As a client that doesn't download the whole blockchain, you must trust the bitcoin network more than one that does. That being said, there is only one question you absolutely need the blockchain to answer:

"How much money do I have?"

Such clients are called SPV, which was a method described in the original bitcoin whitepaper. Electrum is one such client.

It doesn't have an API, but it is open source, so, if you want, you could write a python wrapper for it.

share|improve this answer
SPV still requires downloading headers. I am seeking an API that 1. Requires you trust something (e.g. that the server won't lie to you regarding how much money you have) 2. But that will not require you to download anything and 3. will not require your private keys, so will not be able to steal from you. – ripper234 Feb 15 at 18:19
1  
So, you're looking for an API that does everything but the signing for you, right? – Nick ODell Feb 15 at 23:35
The API should include a client library that does the signing. The remote API should indeed do everything except the signing. – ripper234 Feb 16 at 6:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.