You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Motivation
When users transfer tokens, they use private key to sign their Operation then send to blockchain. If the private key is leak, then phisher who have the private key will be able to transfer assets of the account.
Description
So, I would like to design some more secure steps to this process (and it should be applicable to applications tokens):
1 User can set some hooks like beforeTransfer to their account, and it'll be stored on-chain. The hooks may be a function of an application with arguments,
2 When user transfer native tokens, the hooks in the beforeTransfer will be called recursively,
3 In the application, we can do some security check for the action, e.g. call external service to validate 2-FA code
Thus we can have a more secure account management system. I don't think it's possible of this feature to be implemented with other blockchain. But it may be possible for Linera blockchain because Linera blockchain has some mechanism which let application be able to interact with external services.
The text was updated successfully, but these errors were encountered:
Thanks @kikakkz for the suggestion. We've been looking into (re)authenticating Web2 users together with a partner. Ideal solutions usually try to maintain some form of privacy (at least pseudonymity) and accountability (a super-majority of validators cannot silently impersonate a user).
Motivation
When users transfer tokens, they use private key to sign their Operation then send to blockchain. If the private key is leak, then phisher who have the private key will be able to transfer assets of the account.
Description
So, I would like to design some more secure steps to this process (and it should be applicable to applications tokens):
beforeTransfer
to their account, and it'll be stored on-chain. The hooks may be a function of an application with arguments,beforeTransfer
will be called recursively,Thus we can have a more secure account management system. I don't think it's possible of this feature to be implemented with other blockchain. But it may be possible for Linera blockchain because Linera blockchain has some mechanism which let application be able to interact with external services.
The text was updated successfully, but these errors were encountered: