search

Malibia / exitor-dapp

Core dapp of the Exitor Application.
3 stars 1 forks source link

Abstracting Mnemonics and Private Key Management #2

Open kcelestinomaria opened 3 years ago

kcelestinomaria commented 3 years ago

There is a dilemma in implementing key management in the exitor dapp. The dapp becomes really insecure when we have to manage the private key of someone's Algorand Wallet, they cannot trust us nor can we trust ourselves with keeping their keys in our system. The solution would be to shift exitor dapp into a Javascript application so that we could store the keys locally in the browser, and maybe use MyAlgoConnect Wallet to do everything else i.e Create Assets, Sign Transactions, and Make Payments.

kcelestinomaria commented 3 years ago

One of the solutions in mind is to execute the Creating and Signing of All Transactions on the browser but still in Go functions i.e Using Web Assembly(wasm) binaries. This could still enable local storage of the keys in the browser and signing either using AlgoSigner or the algosdk as a script.