You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like for the app to hide the node private key by default. Today there is no way to safely share your public key unless you have already copied it from the application in private. Opening the security page reveals your private key in plaintext which would make it trivial for anyone to make a copy by taking a picture or reviewing security camera footage (etc).
Relevant log output
No response
Code of Conduct
I agree to follow this project's Code of Conduct
The text was updated successfully, but these errors were encountered:
I think this could be a good change, to make the private key textbox act like a password box instead of a regular textbox, that way it would have the contents hidden by default but a button on the textbox could be clicked to toggle showing the private key or not.
The web client already does it this way, although I don't know if the iOS client does or not as I don't have any iOS devices to test, so there's at least some precedent for it that I know of.
I don't know that I would ever share my public key by showing someone that page but it seems like it's good practice to hide the private key by default because like you said, if you did happen to open it and there was footage with enough resolution that could see your screen, there's a chance a malicious person could pull the private key from the recording.
I don't know that I would ever share my public key by showing someone that page
I am unaware of any other way to access the public key while in the field, excluding via the web interface such as you mentioned.
An alternate solution could be an option to view the public key for any node from the nodes list, including your own node. I still want to keep this feature request open since hiding the private key by default really does help security by a lot.
Contact Details
[email protected]
Tell us your idea.
I would like for the app to hide the node private key by default. Today there is no way to safely share your public key unless you have already copied it from the application in private. Opening the security page reveals your private key in plaintext which would make it trivial for anyone to make a copy by taking a picture or reviewing security camera footage (etc).
Relevant log output
No response
Code of Conduct
The text was updated successfully, but these errors were encountered: