Accountless VSP - Githubissues

decredcommunity / issues

Decred community issue tracker

5 stars 0 forks source link

Accountless VSP #100

Open xaur opened 5 years ago

xaur commented 5 years ago

Accountless VSP would be a huge security, privacy and UX boost.

Discussions:

why accounts are necessary? (reddit, 2019-01-25)
accountless VSP may be possible (chat, 2019-01-25)
fully accountless is not possible because voting prefs must be stored, but some improvements are possible like pubkey-based authentication (#111, decred/dcrstakepool#291) or removing email (#22, decred/dcrstakepool#274); also need to consider DoS protection (chat, 2019-01-30)

xaur commented 5 years ago

Currently you need to create a new VSP account (with a new email) to move funds to another seed (chat) - poor UX.

raedah commented 5 years ago

"fully accountless is not possible because voting prefs must be stored" I do not believe this is accurate. Voting prefs could still be set and sent via a ticket level authentication which does not require accounts.

xaur commented 5 years ago

Voting prefs could still be set and sent via a ticket level authentication

@raedah do you mean clients would sent prefs for individual tickets?

xaur commented 5 years ago

Work started to prototype ticket-based authentication: https://github.com/raedahgroup/dcrstakepool/pull/4