I'm looking for a way to accept Bitcoin Cash on my e-commerce site without using a third-party payment processor such as Rocketr. Third party services would not be ideal for me because:
- I would not hold the private keys to my Bitcoin Cash.
- I would pay a fee for each transaction.
Seeing this as the case, I'm only willing to use software on my own servers to accept Bitcoin Cash in a security-minded way.
Here's my current approach:
- Have two servers: Server A, which runs Apache; and Server B, which runs a Bitcoin Cash wallet such a Bitcoin Unlimited.
- Server A requests addresses from Server B through the JSON-RPC interface.
- Server A displays the address to the user and pings Server B at intervals until the payment is confirmed.
- The user sees a confirmation page and the order is complete.
Advantages to this approach:
- I hold my private keys.
- I would not have to "refill" the server with public keys.
- Private keys (theoretically) never leave Server B.
Disadvantages:
- Both Server A and Server B must be online in order to accept transactions.
- Server B must be configured in a way so that the commands
dumpprivkey
,dumpwallet
,createrawtransaction
, andsend*
are disabled. (How?)
So, is my approach the way to go, or is there a superior alternative?