Why dPoll doesn't implement upvoting
dPoll -mainly- uses Steemconnect to interact with the STEEM network. SC implements oAuth which gives options to get access tokens with scopes.
dPoll only asks for Comment and CommentOption scopes. This means that with the access token gained on the dPoll, we can only broadcast comments/posts on your behalf. However, we cannot upvote with your authority.
If -somehow- a potential attacker gains root access at dPoll on the server level, it's possible for them, to leak access tokens of the users. (This situation is the same for every STEEM related application - including client-side only applications.)
However, since these tokens at dPoll are limited to the Comment and CommentOption scopes, the attacker can't use your voting power. They can only broadcast posts or comments.
This is the reason why we don't implement a voting slider. You can just click View at Steemit and upvote there if you really want to upvote a poll.
I was actually thinking of a way to create a dpoll about this specific subject 20 minutes ago and then I saw this post.
Thanks for the explanation. Back to the drawing board (for me).
Posted using Partiko iOS
Thank you for the explanation.
👍
An idea, have the "View at Steemit" link be "View Post" instead and allow the user to set which front end they prefer to use (Steemit, Busy, SteemPeak, etc). Steemworld has a similar feature.
Nice little detail, let's see what can we do.