Replying to Change this if you want

Web extensions are vulnerable, have privacy loopholes and frequent hacks. Would you save your bitcoin private 🔑 on a browser?

They aren’t audited well.

The best way as of right now to generate your 🔑 on offline device(for example seedsigner) and then allow client to sign events. Hope there will be more ideas how to properly manage 🔑 but definitely not a web extensions
Avatar
tony 🤙🏼⚡️ 2y ago

both web extensions and websites can have security vulnerabilities. both web extensions and websites can be safe or unsafe depending on their design and implementation. which client are you allowing to sign events?

Reply to this note

Please Login to reply.

Discussion

15
Change this if you want 2y ago

Using web extensions for storing private key is bad. Point! There should be better alternatives to it! One of the alternatives been already proposed 🤷‍♂️