4 ms·

What's the motivation for this? Is it coming from inside the industry/is it a suggestion/fun project? I'm don't understand the purpose - it's all about transm

What's the motivation for this? Is it coming from inside the industry/is it a suggestion/fun project? I'm don't understand the purpose - it's all about transmission, not data. Banks could sure do sure do with a standardised API, but is interbank message encryption a problem needing solved? I've haven't heard anything like that. The author is very sure of it's production-readiness. If this transpires to be true, then I could easily see this spec as a good way to encrypt message-based data of all kinds. But where does this bank angle come from?

easytiger 12y ago
And what does it offer above ssh/ssl on their own?
mnem 12y ago
It appears to be from https://trustly.com/en/ https://trustly.com/en/ so perhaps they use it internally and are open sourcing it.
- lorddoig 12y ago
  I should have checked that before commenting, itchy trigger fingers I suppose. It makes a great deal more sense now.
tveita 12y ago
They call it "production grade quality", but I don't see a test suite.
- judk 12y ago
  Maybe it's production grade F
- JoelJacobson 12y ago
  There is a system test which tests all components together, see demo.sh and demo-bankapi.sh.
techdebt5112 12y ago
this type of encrypted messaging is super common between banks and third parties. it's usually done in a similar manner to what is implemented here but in SFTP and every bank has it quirks/a different system for ACKing transmissions. a standard would be nice :)
JoelJacobson 12y ago
Author here. That's a good question. Please see: https://github.com/trustly/bankapi/blob/master/doc/rationale.md https://github.com/trustly/bankapi/blob/master/doc/rationale...
- christiangenco 12y ago
  > The decentralized design of BankAPI protocol ensures noone controls it, noone owns it, noone can shut it down, just like the Internet. The un-innovative design of BankAPI protocol ensures noone can critizise it, as there is nothing new invented, it's just a combination of existing well proven technologies. I don't think I'm comfortable with the 1960s singer-songwriter Peter Noone having this much control of your system. </snark> This is a grammatical pet peeve of mine[1], principally because I used to use it exclusively and was horrified when a girl I liked at the time corrected me. 1. http://grammarist.com/spelling/no-one-noone/ http://grammarist.com/spelling/no-one-noone/
  - Domenic_S 12y ago
    https://github.com/trustly/bankapi/pull/2 https://github.com/trustly/bankapi/pull/2
    - JoelJacobson 12y ago
      Thanks for fixing!
  - judk 12y ago
    Indeed it is sad when the object of one's affection turns out to be an illogical prescriptivist. For a grammar Nazi, you are rather loose with capitalization. ttp://www.yourdictionary.com/noone#wiktionary https://www.google.com/search?&q=noone https://www.google.com/search?&q=noone
- lorddoig 12y ago
  Helpful. Are you using this in production with European banks? I saw that on one of the interactive maps on your site there's no line to/from the UK, which is hardly surprising if you are - I would be staggered if they got on board with anything outside their little circle. Are banks in mainland Europe open to this kind of innovation?

easytiger 12y ago

And what does it offer above ssh/ssl on their own?

mnem 12y ago

It appears to be from https://trustly.com/en/ https://trustly.com/en/ so perhaps they use it internally and are open sourcing it.

lorddoig 12y ago
I should have checked that before commenting, itchy trigger fingers I suppose. It makes a great deal more sense now.

tveita 12y ago

They call it "production grade quality", but I don't see a test suite.

judk 12y ago
Maybe it's production grade F
JoelJacobson 12y ago
There is a system test which tests all components together, see demo.sh and demo-bankapi.sh.

techdebt5112 12y ago

this type of encrypted messaging is super common between banks and third parties. it's usually done in a similar manner to what is implemented here but in SFTP and every bank has it quirks/a different system for ACKing transmissions. a standard would be nice :)

JoelJacobson 12y ago

Author here. That's a good question. Please see: https://github.com/trustly/bankapi/blob/master/doc/rationale.md https://github.com/trustly/bankapi/blob/master/doc/rationale...

christiangenco 12y ago
> The decentralized design of BankAPI protocol ensures noone controls it, noone owns it, noone can shut it down, just like the Internet. The un-innovative design of BankAPI protocol ensures noone can critizise it, as there is nothing new invented, it's just a combination of existing well proven technologies. I don't think I'm comfortable with the 1960s singer-songwriter Peter Noone having this much control of your system. </snark> This is a grammatical pet peeve of mine[1], principally because I used to use it exclusively and was horrified when a girl I liked at the time corrected me. 1. http://grammarist.com/spelling/no-one-noone/ http://grammarist.com/spelling/no-one-noone/
- Domenic_S 12y ago
  https://github.com/trustly/bankapi/pull/2 https://github.com/trustly/bankapi/pull/2
  - JoelJacobson 12y ago
    Thanks for fixing!
- judk 12y ago
  Indeed it is sad when the object of one's affection turns out to be an illogical prescriptivist. For a grammar Nazi, you are rather loose with capitalization. ttp://www.yourdictionary.com/noone#wiktionary https://www.google.com/search?&q=noone https://www.google.com/search?&q=noone
lorddoig 12y ago
Helpful. Are you using this in production with European banks? I saw that on one of the interactive maps on your site there's no line to/from the UK, which is hardly surprising if you are - I would be staggered if they got on board with anything outside their little circle. Are banks in mainland Europe open to this kind of innovation?