You are viewing a single comment's thread from:

RE: dMania Beta Release: A lot of new features -> SteemConnectV2 - The Chosen Ones System - dMania Bot

in #steem7 years ago (edited)

Wow, I had not come across this new site yet, thanks a lot for giving it more exposure and updating us on it. What powerful new initiatives!!!

Though some of it might be scary as one needs "To grant dMania posting permissions, you have to use your active, owner or master key. Your keys are never stored on any server!", the results on the long run will be rather profitable for the majority deciding to partake to the venture and us all on the Steemit.com platform. Would you mind give us a hint as to what makes it legitimate for this site to get access to our active, owner or master keys? This would be VERY important for all to realize and feel safe, partake to this new project and flourish as fully as we all can. especially right now, with all the scams going around, such insurance for us all would render a load of new people partaking in the adventures.

All for one and one for all! Namaste :)

Sort:  

The private keys are needed for SteemConnect to grant another account permissions. The private posting is not enough to grant permissions to another account. busy.org also uses SteemConnect. SteemConnect is maintained by busy.org and the Steem Dev Team. If you trust busy and the Steem Dev Team, you can trust dMania.

So, this means we have to use the "Posting Key", "Active Key" or, I doubt it, the famous and ultimate one that rules them all, the Owner Key"???

Thanks a lot for sharing your knowledge, it is much appreciated from this end. Namaste :)

Yet, with busy.org, I can log in with my posting key. Why do we have to use owner or master keys for DMania?

I have noticed this on a number of other projects claiming that SteemConnect only allows for owner or master key logins. Therefore, something doesn't add up.

Some of these projects are very interesting, but I will not use any of these services that require login with owner or master keys. It is insecure.

Remember, that is the whole point of blockchain and crypto space, to be trustless. We should not have to trust your service that it is not storing or using our owner or master keys.

So if Busy.org can do it with the posting key, why can't DMania?

On the current version of busy.org you can do that because they use SteemConnect V1. The new version of busy that is currently in beta also uses SteemConnect V2 and you will have to use your master, owner or active key too.

I contacted @fabien, one of the creators of busy about the key issue and he said it isn't possible to use SteemConnectV2 with your private posting key.

I can understand that some users are uncomfortable about using their keys on other sites than Steemit. It will get better when SteemConnectV2 is better known.

Remember, that is the whole point of blockchain and crypto space, to be trustless. We should not have to trust your service that it is not storing or using our owner or master keys.

Actually you already trust Steemit with your keys. You don't have to trust my website, you only have to trust SteemConnect. You will be redirected to SteemConnect and you will never enter a private key on dMania. Like I said, SteemConnect is maintained by the Steem Dev Team themselves.

The difference is, Steemit is built by the same people who built the blockchain that my keys access.

OK, thank you for the technical clarification there, Busy.org still seems to using SteemConnect V1, but your project and others are using V2.

There needs to some clarification from the SteemConnect dev team why they have done this. I guess there is info somewhere?

There is only the official announcement of SteemConnectV2:
https://steemit.com/steemit/@steemitblog/steemconnect-2-0-easy-fast-efficient-access-to-the-steem-blockchain

SteemConnectV1 stored your private key in your cookies and sent them back and forth. That was definitely not a good solution.
With SteemConnectV2 you grant permission to other apps. For that you need your master, owner or active key. In my opinion it should be possible to grant posting permission with the posting key, but the Steem dev team decided that it shouldn't be. Maybe they will change that in some hard fork.

Great, it seems we are on the same page then. Perhaps it going to take some community "campaigning" to see such a change happen.

ahhhh well cant we make it so dmania just uses posting keyagain? I do trist steemconnect with alll my heart lol but inteh future ifi tfalls into the wrong hands... you know the rest

we should be keeping tabs on thius situation.... i forgot that i even used my owner key on steemconnect... we shouldnt have to ever use our owner ley on anythingman wtf,.. we should only ever haveto use our active key... his make sme very upset... why would steemconnect ever haveto change our password??????????? because thats all you would ever need the owner key for!!!!!

maaaaan this upsets me

i dont wanna haveto trust steemconnect ..... but i do

OK @zombee u deserve all the money u make man! you shoudl check THIS out bro

https://themerkle.com/mdk-entertainment-community-will-tokenize-memes-in-a-new-blockchain-project/

New token to monetize memes!
get one stepo ahead of this and involve urself with thisnew prohect just in case :D

great one work..

non ci pa organivroi pour laccepter

Coin Marketplace

STEEM 0.16
TRX 0.16
JST 0.030
BTC 59204.66
ETH 2526.28
USDT 1.00
SBD 2.52