交易安全

在线安全交易

该主题主讨论关于如何建立你的在线交易身份以及在比特币社区和他人交易的最佳实践。

介绍

在Bitcoin社区，很多人非常在意他们的安全和身份问题。主要有以下两个原因：

还没有相关暴力机构来支持（violent body ），更简单说，一旦你的交易遇到了麻烦，你还无法向法院寻求帮助。
一个人的信誉是最重要的事情，交易者在同那些还没证明自己的新用户交易时会承担小小的风险。（因为他们上周可能还是个诈骗者，只不过现在使用了一个新的身份）

bitcoin社区使用一些工具来协助保护他们的隐私以及身份。首先最重要的一点就是保护你的计算机安全（Secure Computer）.

在继续进行之前，请确保你已经阅读了保护计算机安全指南（Securing Your Computer），本指南假定你的计算机在硬件和软件两方面都是安全的

创建一个安全的身份

第一步是创建一个安全的公有私有密钥对（public-private key-pair），这将会是保障你的钱包安全和身份安全的基础，请参阅保护你的钱包

创建你的第一个PGP密钥对

A PGP key-pair does two very important functions.

Sign information with an unforgeable signature
Decrypt things that other people encrypt for you

This allows you to both conduct business privately (encryption), and give out promises that you cannot deny making (signature).

Microsoft Windows:

Install GPG4Win: http://www.gpg4win.org/

This contains all the key management and generation tools for Microsoft Windows.

All:

Install Thunderbird: https://www.mozillamessaging.com/en-GB/
Setup your email account with Thunderbird.
Install the Enigmail plugin for Thunderbird: https://addons.mozilla.org/en-US/thunderbird/addon/enigmail/

Upon loading Enigmail, Thunderbird will ask you to make a new ‘identity,’ follow this wizard and you will have created your identity.
You should backup your private key in a secure place. Secondary, you should create a revocation certificate and store that in a different secure place (maybe print it out and store it in your fire safe).

注册[#bitcoin-otc]

Follow the guide here: http://wiki.bitcoin-otc.com/wiki/Using_bitcoin-otc

在以下地方以相同的用户名注册:

Use a strong and different password for each of these places, keeping your passwords in a secure place. This will allow other people in the community to track you across the different Bitcoin related sites. Also making identity theft online more challenging.

交易最佳实践

使用Bitcoin-OTC

Always require the user to become registered with #bitcoin-otc.
Require a signed message from the fingerprint quoted at: http://bitcoin-otc.com/viewgpg.php
Follow additional recommendations for avoiding fraud.

Make sure both parties agree to the terms of the trade with signed messages

通过签名消息来确保双方都同意交易条款

Get a PGP signed quote, and check the signature.
Send a PGP signed receipt.

This allows either party to go public if the trade has become sour and stops your trading partner from claiming the details of the agreement were somehow different.

Search the Bitcoin Forum for the username of the person that you are trading with. Check if the user has provided constructive and useful advice to other parties. And, most importantly, check for any claims that the user has scammed.

使用契约

Trading might benefit from an escrow such that bitcoins are disbursed only after contract terms have been met.

A popular online escrow is ClearCoin.

Found in Bitcoin's community are trusted individuals willing to act as independent, third-party escrow brokers.