HelloZeroNet / ZeroID

ZeroNet authentication provider
http://127.0.0.1:43110/zeroid.bit
GNU General Public License v2.0
43 stars 24 forks source link

Feature request: Deactivate account #21

Closed zcyzcy88 closed 6 years ago

zcyzcy88 commented 7 years ago
  1. After deactivated, can't reactivate
  2. After deactivated, can't use the account to do anything

If someday my privacy key is stolen, try best to reduce data damage via this feature.

HelloZeroNet commented 7 years ago

Actually the ZeroID site does not have control over the accounts after it created the certificate signature, so it can't revoke it. But it can be solved by adding immutable content support: If there is a locked_until key present in any content.json, then the client won't accept any updates to that file before the given timestamp value. So you could add "locked_until": 999999999999999999 to free it ~for ever.