Maximize stakeholder privacy

[xaur]

Maximize privacy of Decred stakeholders and users. Remove or minimize fingerprinting in our infrastructure.

VSPs

• [x] remove recaptcha from VSPs (decred/dcrstakepool#279)
• [ ] wait for VSPs to upgrade to recaptcha fix (decred/dcrstakepool#326)
• [ ] eliminate per-account address reuse (decred/dcrstakepool#311)
  • ~1/4 DCR reuse voting address (rough est.)
  • related: Accountless VSPs (#100)
  • some improvements are possible even without fully removing accounts
• [ ] derive new fee address for every ticket (https://github.com/decred/dcrstakepool/issues/504)
• [ ] make email optional (decred/dcrstakepool#274)
  • ~20 VSP entities have email identities of ~1/4 DCR (rough est.)
  • most disposable email services changed to force accounts and javascript => fingerprinting increased

Politeia

• [ ] make email optional (decred/politeia#554)
• [ ] ensure Pi works via Tor and TorBrowser (all use cases starting from signup)

Riot, Matrix

• [ ] remove recaptcha from Riot registration form for matrix.decred.org (should be possible according to this doc)
• [ ] use Matrix onboarding page to warn about recaptcha enabled for matrix.org homeserver (until it is fixed)
• [ ] research and eliminate Riot "calling home" to default identity server
  • the default identity server is at matrix.org or riot.im
  • requests are sent to it even when "identity server" field was cleared on the registration form
• [ ] self-host Riot web app (#62)

Other

• [ ] More mirrors for release binaries
  • currently all users hit GitHub (Amazon? CloudFlare?) to download new binaries
  • file archive (#26) would help here

Related:

• Make email optional everywhere (#22)

[xaur]

https://github.com/decred/dcrwallet/pull/1471 is a patch to "allow the automatic ticket buyer to derive unique voting addresses in sequence, avoiding address reuse".