RE: eSteem - iOS update v1.2.0 (iPhone, iPad notifications)
Using it now! Very cool. Tons of work has clearly already gone into this and I know it will keep getting better and better. Great job! I'm glad I was able to authenticate with my posting login only. I tried updating my profile picture but didn't realIe that required an active key (does that go on the blockchain?) I'd love to see a pop up window for active key interactions, just like the website. Also, when I clicked on a post with a steemitimg link, it opened up in such a way that I couldn't get back to the app. I had to close it down and open it again. I tried saving the noticication settings and it hasn't taken yet, but I'll keep trying. I hope that's some useful IOS feedback for you.
Great work!
Oh, also, I've noticed the vote doesn't always go through and if it fails, it fails silently. I've tried three times to upvote your post. The spinner image freezes and then goes away.
Edit: ah, I see the "done" bar at the bottom of the screen now. I expect that at the top since that's become the standard iOS approach. Also, if a comment edit fails, the edit appears to be lost (just happened to me here). The screen locks a bit when doing votes/posts/edits so it might be good to show a loading screen or something.
Thank you Luke, indeed valuable feedback! Probably should have mentioned it again, please login with master password that should work and should solve some of the issues you have been having. Although it works with only posting key, app really uses master password to generate other keys, and it assumes that you log in with master password. Perhaps I will improve it to handle it better. Master password is needed for number of occasions, update account, follow/unfollow, transfer etc. So instead of asking all keys separate, master password should solve all issue. Notifications settings probably didn't save for that reason as well. Please try with password and see some these issues are gone. Also upcoming v1.2.1 has some improvements on voting and posting, I will shortly push them to the stores as well, so far testing and a lot small issues that 1.2.0 had is gone. I will also include user feedback from 1.2.0 to improve 1.2.1 further before sending an update.
Edit: yes profile picture url goes to blockchain, as for voting and posting there is major fix coming on 1.2.1. I found that handling connection on mobile devices different than PC. So there is connection issue when phone goes background. Have tried different methods to handle this, try to keep connection on, didn't work. Try to disconnect and reconnect didn't work as expected. But finally found a way to handle it so it is now working perfect also saves bandwidth. It is coming on 1.2.1
I'm a little old school when it comes to security and don't really feel comfortable giving my master password to anyone (including Steemit.com). I'm confused why a follow would require a master password if Steemit.com does not? I think replicating the Steemit.com interface which prompts for active password when needed is a much more secure way to go and builds confidence in your platform. Too many people take online security way too simply, and it's up to us as developers to educate them about password management software, the dangers of password reuse, and of only allowing access to the bare essentials when integrating with third party systems. Once again though, great work. I'm looking forward to the updates and more consistent functionality with only the posting password.
Thanks, you are right. But do you think majority non crypto people understand it? From UX point shouldnt it be more user friendly when they only required to enter password once and app takes care of everything else. Yes, some people was also concerned and main password. App is opensource and it connects to server of choice. There is extra pin code security in place. Let's take it to steemit.chat, would love to hear your thoughts on how it can be achieved...
The pin does help as far as it having your master password in there, so maybe that's enough. I still think the option to only give your posting password is an important one. If they aren't using the crypto features and are just posting, commenting, and voting, they shouldn't have to care about the active or owner passwords. If they are messing with the crypto side of things, I think they should care about the various levels of security and take them seriously. I think the Steemit website took the same approach. I'll try to catch you on chat so we can discuss further.