RE: Streemian.com to open its doors and offer a 20% discount
Hi! First thanks a lot for to make this cool app :) I made an account but is asking me for my Active Private Key (You can move funds with it as far as I know) or my Password(can do it too) to unlock my account.... Im not a coder or hacker, not someone who knows a lot about it but why is asking for this key and not for the just "Posting and Voting" key?
It says on the top
About This App
This Account App let's you upgrade your account such that it can be used by the services offered by Streemian.com.
By upgrading your account with this app, you will:
allow Streemian.com to post under your name and
allow Streemian.com to vote under your name.
At no times will we be able to access any of your funds in your account.
Well, if I put my active key you are able to access my funds or Im wrong? Why can I do? I really want to try the service. Thanks in advance for any help.
Hello,
I much appreciate you taking the cautious side and I urge everyone to do the same and not blindly provide the active key (password) to any webpage (including streemian.com, which I am the CEO of).
The problem currently is that there is no way to have steemit.com update your account properly in order to allow streemian.com to vote on your behalf. The blockchain needs to be instructed to let streemian do so, and to instruct the blockchain, the active key is required.
However, some measure have been take to make live easier for the user such that users can instruct the blockchain properly by "just using" that page.
The security model for the end user is that the page's sources are hosted on a public server (github) and the source code can be easily review by developers (I urge as many developers as there are to take a look and verify the code). I also encourage every users to read the technical details on the page.
Hopefully, we will see a more closely integration with steemit.com to make live easy and secure for customers.
//edit: To make it clear: Streemian.com does not store your active key. In fact it doesn't even see your active private key. The key never leaves your browser and all the modification instructions are generated and signed in your browser!
Thanks a lot for the explanation @xeroc :-) and you are right, I should read the technical details on the page ;-)
Danke nochmal.
Cheers
//edit: Hoping this will come soon