[Steemit] Secured PDF with private keys and instructions

blockchainstudio (72)in #utopian-io • 5 years ago (edited)

Repository

Issue: https://github.com/steemit/condenser/issues/3311

Components

Steemit.com condenser private keys and instructions download

Proposal Description

There were many users who were using the master password for daily uses, which is obviously quite dangerous. So steemit.com recently blocked the use of master password for login and then provide the download of a PDF with all the private keys (and some instructions).

I absolutely agree with the general idea, BUT the PDF isn't password protected! Moreover, it has the same naming convention, "username_steem_keys.pdf."

Well, if I'm a hacker, the first job that I want to do is searching files with the name with "steem_keys.pdf."

I strongly believe that a first-time user expect that the link works this way. Once downloaded, it may have already uploaded to a cloud without a protection. And most novice users (who's using master password for login) may even forget to delete or protect the PDF.

This makes users more vulnerable.

The PDF should be password protected.

Mockups / Examples

Well, I believe the only secured PDF should be provided, but if users take a risk, the current unprotected version may also be provided, as shown in the above.

The default password can be set to be the master password, or it may be better to give users to set their own password for the PDF.

Implementation Details

Currently, jspdf is used for the PDF creation, but this library doesn't support secured PDF.

I found one library for the secured PDF creation:

For instance, jsreport-pdf-password:
https://www.npmjs.com/package/jsreport-pdf-password

Benefits

Security. What's more important? I don't think more detailed explanation is needed. Currently, in some sense, it makes more insecure to make it secure.

GitHub Account

https://github.com/economicstudio

Some of my contributions have been mentioned in steemitblog's posts:

#ideas #steemit #condenser #busy

5 years ago in #utopian-io by blockchainstudio (72)

$15.33

Sort:

Trending

[-]

syedumair (72) 5 years ago

Thank you for contributing @blockchainstudio!

The default password can be set to be the master password, or it may be better to give users to set their own password for the PDF.

I don't think any user will be willing to take such risk. When I first downloaded my steem keys, the first thing that struck my mind was that the PDF should have some security.
I am glad you took time to write a contribution on this issue and I hope Steemit will provide users a password protected PDF with keys in near future.

Your contribution has been evaluated according to Utopian policies and guidelines, as well as a predefined set of questions pertaining to the category.

To view those questions and the relevant answers related to your post, click here.

Need help? Chat with us on Discord.

[utopian-moderator]