RE: Steem Monsters Cartography Challenge! Create the World Map! 120 Booster Deck Contest!
I've used Vessel every time when buying monsters, and I greatly appreciate the Vessel support.
I understand the concerns with SteemConnect but the way I look at it, the Utopian hack actually demonstrated the value of SteemConnect. Instead of all those posting keys needing to be reset, the SteemConnect OAuth tokens were revoked and no one had to change any keys. If SteemConnect itself ever got hacked, then Steemit could also be hacked. I figure we have to put trust somewhere and right now that's with the core Steemit, inc developers.
Right now, unfortunately, there's no easy way to ensure "This only happens in your browser and doesn't get sent to our servers". That's why I like Vessel. It makes that separation clear. A browser extension, to me, still feels a bit shady. I've never really trusted MetaMask. I wonder sometimes if those extensions are spying on pages or capturing key strokes... I don't like them running all the time in the background. I do agree they are more user friendly by far though.
No worries about the long reply. It's a really important discussion, IMO.
Keep up the great work.
I think we're mostly in agreement here. No method that involves entering private keys into a browser window is an ideal solution. I also agree that Vessel is a better solution from a security perspective than a browser extension, but it's definitely not better from a usability perspective when it comes to integration with websites (which is what the Steem blockchain is mostly all about). So in my opinion an open source browser extension would be the best of both worlds in that it would provide ease of use with Steem-based websites while also allowing the code to be reviewed and audited to ensure there's no shady business going on.
I would like to use vessel but when I click xdg-open from chrome, vessel never gets populated with the transaction. I wonder if this is because I installed vessel using its linux snap?
Check with @jesta on Discord or Steemchat or open an issue ticket on Github. I've never had a problem using it.