search

greenaddress / WalletCrx

GreenAddress open source client
https://greenaddress.it/
GNU Lesser General Public License v2.1
79 stars 39 forks source link

Chrome extension wallet does not automatically hide consumed receive address once funds are received. #14

Open kristovatlas opened 8 years ago

kristovatlas commented 8 years ago

When the Chrome extension receives funds and this is indicated by a message that fades in/out and a sound, the wallet fails to perform the following privacy-preserving functions:

  1. The QR code of the address that just received funds is not hidden automatically.
  2. Once the QR code display is manually exited by the user, a new receiving address will not be displayed to the user. The user must manually click away from the Receive Money tab and return to it in order to see a new receiving address.

By not meeting these specifications, users are more likely to unwittingly reuse receive addresses without understanding the privacy consequences. Also, additional clicks to reveal a new receive address mean that users are less likely to put in the effort, as demonstrated by various UI studies of # clicks vs. user participation to perform a given action.

jonathancross commented 6 years ago

Hmmm... 2 years old and no response. Is this still an issue?

Ps: maybe obsolete considering #23