Author [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] Topic: A question about light wallet/web wallet/phone wallet  (Read 294 times)

0 Members and 1 Guest are viewing this topic.

Offline alt

A question about light wallet/web wallet/phone wallet
« on: April 08, 2015, 02:03:22 AM »

I have not read the code for light wallet, here I have a question about security
because light wallet didn't download block chain, how can the client verify the real address for a BTS account?
thanks

Offline alt

Re: A question about light wallet/web wallet/phone wallet
« Reply #1 on: April 08, 2015, 02:05:37 AM »
If this can verify, we can set a web wallet website to support all BTS client, include: BTS, NODE, PLS
all blockchain use BTS's account data.

Offline bitatom

  • Jr. Member
  • **
  • Posts: 24
    • View Profile
Re: A question about light wallet/web wallet/phone wallet
« Reply #2 on: April 08, 2015, 06:07:09 AM »
this question which I want to ask, we should focus on the light wallet which support multi user, when it's finished, It will support all platform at once.

further more, what's difference between web wallet, light wallet and mobile wallet? theory.

Offline bitatom

  • Jr. Member
  • **
  • Posts: 24
    • View Profile
Re: A question about light wallet/web wallet/phone wallet
« Reply #3 on: April 08, 2015, 06:13:05 AM »
I think verify the BTS account by server side. local generate and store private key, sign the transaction, send to the server and broadcast it.

I have not read the code for light wallet, here I have a question about security
because light wallet didn't download block chain, how can the client verify the real address for a BTS account?
thanks

Offline alt

Re: A question about light wallet/web wallet/phone wallet
« Reply #4 on: April 08, 2015, 10:06:24 AM »
I mean when I transfer 10 USD to account btsbots from light wallet,
how does the client get the public address which belong to account btsbots, and how to verify this?
if server give a wrong public address to client, how to avoid it?

Offline bitatom

  • Jr. Member
  • **
  • Posts: 24
    • View Profile
Re: A question about light wallet/web wallet/phone wallet
« Reply #5 on: April 08, 2015, 12:36:30 PM »
It's impossible to avoid it when using alias of public key, but it's possible to reduce the risk. light wallet should query from multi server(3 or more) to verify  the alias. so the more light wallet server the better. there is another benefit: one server is centralization, more and more servers are decentralization, like email server but different: light wallet can connect to any server and work well.

so I think bts should setup more and more full node and light node.
 
« Last Edit: April 08, 2015, 12:39:06 PM by bitatom »

Offline lastagile

  • Full Member
  • ***
  • Posts: 144
    • View Profile
Re: A question about light wallet/web wallet/phone wallet
« Reply #6 on: April 08, 2015, 01:02:46 PM »
I think we can hash with the account name


从我的 iPhone 发送,使用 Tapatalk

Offline alt

Re: A question about light wallet/web wallet/phone wallet
« Reply #7 on: April 08, 2015, 01:06:59 PM »
yes, maybe this is a solution, I wonder if we have do something to avoid this risk for now.
It's impossible to avoid it when using alias of public key, but it's possible to reduce the risk. light wallet should query from multi server(3 or more) to verify  the alias. so the more light wallet server the better. there is another benefit: one server is centralization, more and more servers are decentralization, like email server but different: light wallet can connect to any server and work well.

so I think bts should setup more and more full node and light node.

 

Google+