4

There is a ton of bitcoin information, but it's hard to find up to date best practices for making webapps. I am very comfortable making secure webapps, and I'd like to start some bitcoin related webapps, and using a merchant solution like bitpay is not an option. Could someone steer me towards the right keywords and concepts to do this?

When starting a bitcoin webapp, where each account can send and receive bitcoin, what are the best practices around bitcoin transactions? How are bitcoin transactions around accounts handled for online exchanges? Should each account be set up as a separate wallet? Or is it safe enough to give each account an address and record a balance and transaction history tied to each account? Is it necessary to use bitcoind or are there other methods for making transactions?

What kinds of security/safeguards should all bitcoin webapps have (i.e. is it necessary to have cold storage?, two factor auth, etc)?

Edit: I'd like to originate and also receive bitcoin payments. I want to make it easier for people to get started if they have friends that already have bitcoin. So a bitcoin holder can set up an account. Then s/he can email bitcoin to the friend via the app. The app then emails the friend the transaction details if they already have an account; otherwise it will sends an invitation to create an account along with some intro to bitcoin articles. Paying a X% processing fee doesn't make sense in this case where I expect most transactions to be small.

Improve this question
3
  • Very hard to answer this without having some idea about the type of app. The most obvious question is if you are going to be the originator of Bitcoin payments or just the recipient, but if you provided more information it would give us the ability to provide a clearer answer.
    – jgm
    Apr 14, 2013 at 14:12
  • Sorry, I thought this question might be useful for other webapp developers. I've updated the question.
    – John
    Apr 14, 2013 at 14:44
  • I'm not sure what your trying to make, but I know bitfloor and coinbase have good merchant api's which takes care of most of the details your talking about.
    – Loourr
    Apr 14, 2013 at 20:46

1 Answer 1

Reset to default
1

bitcoind has a feature named "accounts" which does exactly that: handles the balance in separate accounts, which you can map to your users. It automatically generates new addresses for the accounts, can move coins between accounts, etc.

Obviously you must take great care into keeping it as secure as possible.

Improve this answer
2
  • bitcoind seems like it will work. How does JSON-RPC fit into this picture?
    – John
    Apr 16, 2013 at 11:47
  • @John you may interact with bitcoind using json-rpc.
    – o0'.
    Apr 16, 2013 at 11:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.