📅 Original date posted:2014-04-04 📝 Original message:On Fri, Apr 4, 2014 at ...

Eric Larchevêque [ARCHIVE] /

npub1pa6…rxtp

2023-06-07 15:17:24

in reply to nevent1q…xgnv

📅 Original date posted:2014-04-04
📝 Original message:On Fri, Apr 4, 2014 at 4:56 PM, slush <slush at centrum.cz> wrote:

> I'm cracking my head for many months with the idea of using TREZOR for web
> auth purposes. Unfortunately I'm far from any usable solution yet.
>
> My main comments to your BIP: Don't use bitcoin addresses directly and
> don't encourage services to use this "login" for financial purposes. Mike
> is right, mixing authentication and financial services is wrong. Use some
> function to generate other private/public key from bitcoin's seed/private
> key to not leak bitcoin-related data to website.
>
>
I'm probably very naive, but the fact that the authentication key is your
Bitcoin address was for me a great feature :)
What are the risks associated of id yourself with a bitcoin address you
plan to use on the website for transaction ?

I mean, what is the difference between doing that, and id with a login/pass
and add your bitcoin address in a settings field ? (knowing you could
always find a mechanism to transfer the account to another bitcoin address
if needed)

Eric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20140404/6e0e0513/attachment.html>;

Author Public Key

npub1pa6l5jatv92d4vzk566r58zjawpuu0we8nhrywfhp90f9948e0tsx3rxtp

Show more details

Published at

2023-06-07 15:17:24

Kind type

1 Short Text Note

Event JSON

{ "id": "3c640cc5d0af309096b25b4f9a49f932f660637e8b7cc99b26eaa21b997e9bd9", "pubkey": "0f75fa4bab6154dab056a6b43a1c52eb83ce3dd93cee323937095e9296a7cbd7", "created_at": 1686151044, "kind": 1, "tags": [ [ "e", "4ef6a6393121d94287520af04668f86fde241c789a5b506f18e8d499d4d231da", "", "root" ], [ "e", "d3bfe28e1a779a396689c674104ec83b98bbe17d742f9a79c6a3d5dd0ff92ad9", "", "reply" ], [ "p", "eb7ca795057ca7cabde6f541c741e661d013414934e5934c2e04c6677625c99a" ] ], "content": "📅 Original date posted:2014-04-04\n📝 Original message:On Fri, Apr 4, 2014 at 4:56 PM, slush \u003cslush at centrum.cz\u003e wrote:\n\n\u003e I'm cracking my head for many months with the idea of using TREZOR for web\n\u003e auth purposes. Unfortunately I'm far from any usable solution yet.\n\u003e\n\u003e My main comments to your BIP: Don't use bitcoin addresses directly and\n\u003e don't encourage services to use this \"login\" for financial purposes. Mike\n\u003e is right, mixing authentication and financial services is wrong. Use some\n\u003e function to generate other private/public key from bitcoin's seed/private\n\u003e key to not leak bitcoin-related data to website.\n\u003e\n\u003e\nI'm probably very naive, but the fact that the authentication key is your\nBitcoin address was for me a great feature :)\nWhat are the risks associated of id yourself with a bitcoin address you\nplan to use on the website for transaction ?\n\nI mean, what is the difference between doing that, and id with a login/pass\nand add your bitcoin address in a settings field ? (knowing you could\nalways find a mechanism to transfer the account to another bitcoin address\nif needed)\n\nEric\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20140404/6e0e0513/attachment.html\u003e", "sig": "364a14a4086bf0dda4ff136a3cfda0bc1d8fcaeece2399bb889a9427cc5e4440b375b112df166f6e748b065d91414af25b6b252929c027bbcf88075ce1c816bb" }