namecoin / meta

General-Purpose Namecoin Repository
4 stars 3 forks source link

Trezor Hardware Wallet Support #1

Open JeremyRand opened 9 years ago

JeremyRand commented 9 years ago

This is a tracking ticket for Trezor support for Namecoin (not necessarily in Namecoin-Qt). See the following links:

https://forum.namecoin.info/viewtopic.php?p=12340#p12340 https://bitcointalk.org/index.php?topic=122438.msg6926871#msg6926871 https://bitcointalk.org/index.php?topic=644755.0

There are a number of ways that this could be implemented.

The method that the Trezor people mention basically involves setting up a blockchain explorer API that can provide the Trezor web wallet with enough data for the web wallet to interact with the user's Trezor.

That method, as I understand it (anyone want to confirm?), has some security issues. Specifically, while it is not possible for the web wallet operator to steal your NMC (since the keys stay in your Trezor), they are able to falsely claim that you have received NMC (which might let someone commit fraud against you), as well as make your legitimately owned NMC unspendable (which might let someone punish users monetarily, or even steal names by forcing a name to expire). In my opinion, this is not adequate security.

The other method, which the Trezor people didn't mention, is to directly implement the Trezor hardware library into a Namecoin client which validates the blockchain as normal (this could be a full client, or a libcoin-style light client, or an SPV+UTXO ultra-light client). This gives the same security guarantees as the standard Namecoin client, with the additional benefit that your wallet is effectively in cold storage. I'm pretty sure that the Armory guys are planning on doing this; I'm not sure about other clients since I don't follow them as much. In my opinion, this is a better route to take.

NOTE TO DONORS: Please do not place bounties on this issue; place them on specific implementations as described above. That way this issue can remain open as a tracking issue.

Note: This is a continuation of the discussion from https://github.com/namecoin/namecoin/issues/148 . Refer to that issue for the history of the discussion.

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/4951530-trezor-hardware-wallet-support?utm_campaign=plugin&utm_content=tracker%2F6562918&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F6562918&utm_medium=issues&utm_source=github).