Sort:  

Good question. Transactions use steemconnect, but signing in to the site means trusting aggroed and yabapmatt with your posting key.
They're working on a browser extension that will mean your keys aren't sent over the net; but are stored entirely in your browser; but it's not ready yet.
In the meantime, the devs are two of the most trusted names on the chain.

Ah, thanks for the feedback. I've been wanting to check it out, but it was making me a bit nervous! It feels like the wild west with Steemit apps.

Understandable. Yabapmatt, the main coder, hates it more than we do, hence the efforts to build a browser extension. Get involved, mate. It's great fun speculating on which cards are going to be winners. Stats are out soon. Gameplay start of October.

Ok, I went ahead and took the plunge and signed up/bought a starter pack and then bunch more cards. I felt a bit better after you vouched for it!

You won't regret it.
Sent you a starter. Enjoy :)

just to clarify... steemmonster asks for the posting key... not happy about this but at least its not the active or owner key??.. ;)

Correct. Logging on to steemmonsters.com requires your posting key. Buying packs or individual cards with Steem generates a steemconnect popup box which needs your active key, but this isn't communicated to the SM devs.
The steemmonsters team can't jump into steemit and spend your money; but they could post and upvote on your account if they wanted to. (They don't want to).

Awesome! Thanks, Matt.

Coin Marketplace

STEEM 0.16
TRX 0.15
JST 0.029
BTC 55157.38
ETH 2317.75
USDT 1.00
SBD 2.33