Comments (4)
This feels like wallets asking users which CIP-30 extensions to enable for a given dApp?
from cips.
@Crypto2099 good idea to have an issue for this requirement. I agree it will be important: maybe important enough to create a CPS for it.
@Ryun1 something seems familiar about it... didn't something like this come up when discussing hierarchies of CIP-30 functions? (Apologies for not being great in this field; just trying to connect with prior discussion in the many PRs we have for CIP-30.)
from cips.
Perhaps but could also be taken a step further and higher to even the "core" CIP-30 functionality such that:
- I am a user who wants to connect my wallet to a site to
signData
with my wallet but DO NOT want to give that website access to create a transaction on my behalf - I want to give a site the ability to read my wallet state
getUTxO
without the ability to generate and request signature for a transaction on my behalf
etc :)
from cips.
So adding optional permissions per endpoints?
I do quite like this as an idea, but I don't really see a backwards compatible way to integrate this with existing CIP-30 implementations. I think we would be better off pursuing this as an extension, to something like a CIP-90?. I did have this in the rationale at some point... that CIP-90 would allow for "privacy preserving connections" but I must have removed at some point.
The counter argument is; does not sharing public info from wallet to site that useful? because if not then what are they sharing? why connect? - if they are signing (signData or signTx) then they are revealing their public keys where the dApp can index chain for the wallet's public info.
I believe we had the discussion somewhere about IF users should have the ability to explicitly permission dApps based on extensions -- but this was decided against - I will try and find the thread.
I am a user who wants to connect my wallet to a site to signData with my wallet but DO NOT want to give that website access to create a transaction on my behalf
The site would be able to identify your wallet from your signature thus allowing them to index chain for the wallet's UTxO set.
I want to give a site the ability to read my wallet state getUTxO without the ability to generate and request signature for a transaction on my behalf
Id argue that CIP-30 almost allows this behaviour, a user could always refuse a signTx
action. The only difference is that the site is allowed to request it as much as they like, but I dont really see this being much of an issue.
from cips.
Related Issues (20)
- CIP-9999 | Adjust preamble and structure w.r.t CIP-0001 HOT 1
- CIP-1852 | Adjust preamble and structure w.r.t CIP-0001
- CIP-1853 | Adjust preamble and structure w.r.t CIP-0001
- CIP-1854 | Adjust preamble and structure w.r.t CIP-0001
- CIP-1855 | Adjust preamble and structure w.r.t CIP-0001
- Add References section to CIPs/CPSs HOT 10
- CIP-100: Make witnessing optional + add CIP-08 message signing HOT 5
- CIP-9999 | How to add Copyright to CPSs HOT 4
- CIP-0069: alternative approach HOT 10
- CIP-0072: Suggestions for improving dApp registration identity verification HOT 4
- CIP-100 | Canonical example is wrong HOT 3
- CIP 100 | Provide directions on how to create signatures for the body without circular dependencies. HOT 19
- Wiki: Initial topics + points to cover HOT 8
- CIP-0058: integers vs. byteStrings for cryptographic applications HOT 32
- Rendering errors on cips.cardano.org. HOT 2
- CIP-0013: Current state of integration and further advancements HOT 13
- CIP-0010 | Add schema links HOT 2
- Voter metadata sign the initial document HOT 1
- Tracking protocol parameters definitions HOT 3
- Indexing CIPs Repo for Core `Waiting for Implementation` proposals HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cips.