Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PayPal to support Ethereum and Bitcoin

newsroom.paypal-corp.com

Post reply on HN
Print view View original

321–330 of 409 posts

Re: PayPal to support Ethereum and Bitcoin

#321

Post by bilekas »

JonathonW wrote: post #312
unstatusthequo wrote: post #310

Earlier quoted context omitted.

Nice of them to cause confusion to make phoning easier. No, corp.paypal.com/news or PayPal.com/corp/newsroom etc weren’t a good idea. I’d love to hear how decisions like this get made.

This approach (using a separate domain for content that isn't part of their service itself) has security advantages-- for example, this way a compromise of their news site CMS can't expose users' PayPal session tokens. It's decently common for websites to do this-- this is the same reason why Github Pages is hosted at github.io rather than github.com, and why static blobs are at githubusercontent.com. Those have a so…

Maybe I'm missing something but you can't separate you're session and authentication with a different subdomain? Eg. My session on corp.paypal.com would be locked down to solely corp.paypal.com.

From a practical sense, what different does a subdomain and a dedicated domain offer if you're managing your certs correctly?

Re: PayPal to support Ethereum and Bitcoin

#322

Post by [deleted] »

bilekas wrote: post #321
JonathonW wrote: post #312

Earlier quoted context omitted.

This approach (using a separate domain for content that isn't part of their service itself) has security advantages-- for example, this way a compromise of their news site CMS can't expose users' PayPal session tokens. It's decently common for websites to do this-- this is the same reason why Github Pages is hosted at github.io rather than github.com, and why static blobs are at githubusercontent.com. Those have a so…

Maybe I'm missing something but you can't separate you're session and authentication with a different subdomain? Eg. My session on corp.paypal.com would be locked down to solely corp.paypal.com. From a practical sense, what different does a subdomain and a dedicated domain offer if you're managing your certs correctly?

[deleted]

Re: PayPal to support Ethereum and Bitcoin

#323

Post by gblargg »

mitkebes wrote: post #256
esskay wrote: post #184

I'm both surprised they didn't already, and am more surprised people are still willing to even use PayPal at this point.

Paypal is good as a consumer. You can buy stuff without giving random sites your card details, and paypal is willing to refund purchases if you have a legitimate issue and the seller refuses to cooperate with you. My wife placed a large clothing order some months back, but the package got ripped in transit and we only received about a quarter of it. The seller company refused a refund because the tracking data said "…

I had PayPal side with a clear scammer for almost $5k. PayPal declined, and I also tried leaving negative BBB feedback which I heard can help. In the end I had to do credit card chargebacks, which thankfully succeeded.

Re: PayPal to support Ethereum and Bitcoin

#324

Post by jMyles »

mindwok wrote: post #317
joahnn_s wrote: post #215

The whole purpose of crypto is to exchange money online like we exchange cash in person, so who wants PayPal as a middleman on a tech designed not to have a middleman? Who will use that

That's the purpose of crypto, yes. As it turns out people like having trusted authority in their money movements, and so now we're watching the crypto world just re-invent the financial industry basically as a digital twin. Just look at Tether, the darling of the stablecoin world, which is minted by a handful of institutional clients. If you squint hard enough, you can see the banks.

> Tether, the darling of the stablecoin world

...huh?

Re: PayPal to support Ethereum and Bitcoin

#325

Post by IshKebab »

hocuspocus wrote: post #266
IshKebab wrote: post #214

Earlier quoted context omitted.

It's pretty convenient when it's offered as a checkout option and it lets you avoid filling in your details yet again. I wouldn't store any money in it though.

Major browsers have been doing that for what, 10 years? And today I mostly see Adyen, Stripe, Klarna, Apple/Google Pay... in Europe PayPal is comically expensive.

It's still more convenient than browser auto-fill (which I also use).

Paypal is still probably the most popular "easy" checkout option in the UK, more popular than Stripe, Google pay and Amazon pay.

Maybe not more popular than Klarna, but I don't have a debt problem so I don't want to use that. Never heard of Adyen and I can't recall ever seeing Apple pay.

Re: PayPal to support Ethereum and Bitcoin

#326

Post by Hadriel »

delusional wrote: post #234
em3rgent0rdr wrote: post #224

Earlier quoted context omitted.

PayPal 20 years ago made it easy to engage in internet commerce across various world currencies. And now users of PayPal have an easy way to commerce with two more world currencies using a familiar trusted interface. Another way PayPal as the middle man helps: "Unclaimed links expire after 10 days", which sounds like it avoids the problem of accidentally sending bitcoin into the void.

I completely understand why I would want paypal as an intermediary in the unlikely case I wanted to send bitcoin to somebody. I think what makes less sense to me is why people who actually like crypto would want paypal. I want a regulated middleman answerable to democratic legislation. Crypto people (largely) don't. I guess this is mostly a play that crypto people won't actually care if there's a middleman if it crea…

Easy answer: most people dont arent crypto people but may be open to accepting crypto from crypto people. Aka sending btc to friend/merchant who doesnt have any or vice versa. Crypto people are the small minority

Re: PayPal to support Ethereum and Bitcoin

#327

Post by SahAssar »

bilekas wrote: post #321
JonathonW wrote: post #312

Earlier quoted context omitted.

This approach (using a separate domain for content that isn't part of their service itself) has security advantages-- for example, this way a compromise of their news site CMS can't expose users' PayPal session tokens. It's decently common for websites to do this-- this is the same reason why Github Pages is hosted at github.io rather than github.com, and why static blobs are at githubusercontent.com. Those have a so…

Maybe I'm missing something but you can't separate you're session and authentication with a different subdomain? Eg. My session on corp.paypal.com would be locked down to solely corp.paypal.com. From a practical sense, what different does a subdomain and a dedicated domain offer if you're managing your certs correctly?

You can, but a lot of people lack the discipline to do so correctly. I'd prefer them to use corp.paypal.com, but as a security guy it's easier to just get them a separate domain and let them have their less-secured stuff completely isolated.

Re: PayPal to support Ethereum and Bitcoin

#328

Post by c0balt »

bilekas wrote: post #321
JonathonW wrote: post #312

Earlier quoted context omitted.

This approach (using a separate domain for content that isn't part of their service itself) has security advantages-- for example, this way a compromise of their news site CMS can't expose users' PayPal session tokens. It's decently common for websites to do this-- this is the same reason why Github Pages is hosted at github.io rather than github.com, and why static blobs are at githubusercontent.com. Those have a so…

Maybe I'm missing something but you can't separate you're session and authentication with a different subdomain? Eg. My session on corp.paypal.com would be locked down to solely corp.paypal.com. From a practical sense, what different does a subdomain and a dedicated domain offer if you're managing your certs correctly?

You can, but is difficult and prone to errors. Separate domains solve the root cause of the issue. The alternative is an entry on the public suffix list.

Re: PayPal to support Ethereum and Bitcoin

#329

Post by r_singh »

kragen wrote: post #294

Is this a legitimate alternative domain name for PayPal, or is it a parody or phishing site? It's not paypal.com. Apparently it's legit: https://news.ycombinator.com/item?id=45250319

I’ve always felt that we need a tool to be able to answer such a question.

My bank also uses a different hyphenated domain name on emails… another use case could be to check for legit social media profiles cause fakes are popular too and may not be discernible for regular grass touching not-so-online in 2025 individual.

Post reply on HN