summaryrefslogtreecommitdiff
path: root/da/1459be3b3e3526223a102894ffc3980efbffda
blob: f339497f9ecda0c28e564f18a66e0dab978423fe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
Received: from sog-mx-2.v43.ch3.sourceforge.com ([172.29.43.192]
	helo=mx.sourceforge.net)
	by sfs-ml-3.v29.ch3.sourceforge.com with esmtp (Exim 4.76)
	(envelope-from <c1.sf-bitcoin@niftybox.net>) id 1YVqOd-0006XL-0x
	for bitcoin-development@lists.sourceforge.net;
	Wed, 11 Mar 2015 23:50:39 +0000
Received-SPF: pass (sog-mx-2.v43.ch3.sourceforge.com: domain of niftybox.net
	designates 95.142.167.147 as permitted sender)
	client-ip=95.142.167.147;
	envelope-from=c1.sf-bitcoin@niftybox.net; helo=i3.hyper.to; 
Received: from i3.hyper.to ([95.142.167.147])
	by sog-mx-2.v43.ch3.sourceforge.com with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.76) id 1YVqOb-00025b-BH
	for bitcoin-development@lists.sourceforge.net;
	Wed, 11 Mar 2015 23:50:39 +0000
Received: from localhost (localhost [127.0.0.1])
	by i3.hyper.to (Postfix) with ESMTP id 0848CE01D3;
	Thu, 12 Mar 2015 00:50:31 +0100 (CET)
Received: from i3.hyper.to ([127.0.0.1])
	by localhost (i3.hyper.to [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id 1V7iRoQu-3uh; Thu, 12 Mar 2015 00:50:30 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by i3.hyper.to (Postfix) with ESMTP id 2A98CE01F3;
	Thu, 12 Mar 2015 00:50:30 +0100 (CET)
X-Virus-Scanned: amavisd-new at i3.hyper.to
Received: from i3.hyper.to ([127.0.0.1])
	by localhost (i3.hyper.to [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id 6qyZ24cv6gJ2; Thu, 12 Mar 2015 00:50:30 +0100 (CET)
Received: from [10.1.10.188] (142-254-47-143.dsl.dynamic.sonic.net
	[142.254.47.143])
	by i3.hyper.to (Postfix) with ESMTPSA id 32ABDE01D3;
	Thu, 12 Mar 2015 00:50:29 +0100 (CET)
Message-ID: <5500D4C3.4090207@niftybox.net>
Date: Wed, 11 Mar 2015 16:50:27 -0700
From: devrandom <c1.sf-bitcoin@niftybox.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
	rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Mike Hearn <mike@plan99.net>, Aaron Voisine <voisine@gmail.com>
References: <54F32EED.6040103@electrum.org>	<CANEZrP23buJF0ENfrKGRuzpQ3Uod09s-kRcb3CBw1-OmUxEyZg@mail.gmail.com>	<550057FD.6030402@electrum.org>	<CANEZrP2UrRYG2wh3DHHj9B3Sp1X=n+gPCRcoj1Fouu4Lg157UA@mail.gmail.com>	<1426100677.1908596.239033309.7C4F8D47@webmail.messagingengine.com>	<CALC81CPonBX5pGucU9Pu7P7S042c+h8=vNvocX=7f9Yi_kqv5w@mail.gmail.com>	<CAAS2fgRuBwn6HXeZeth+x-R8DAdsVZmYy4nMA3kN+oJaURftgw@mail.gmail.com>	<CACq0ZD64rZAQs1mWQdwgx1WJq2btAVs3GbegPpkO-Wh49SoGeA@mail.gmail.com>
	<CANEZrP3ri6QDqomWKMnLqj_ZJxVDOY4QRvWa=L4RzdKFzz+WsQ@mail.gmail.com>
In-Reply-To: <CANEZrP3ri6QDqomWKMnLqj_ZJxVDOY4QRvWa=L4RzdKFzz+WsQ@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-Spam-Score: -1.5 (-)
X-Spam-Report: Spam Filtering performed by mx.sourceforge.net.
	See http://spamassassin.org/tag/ for more details.
	-1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for
	sender-domain
	-0.0 SPF_PASS               SPF: sender matches SPF record
X-Headers-End: 1YVqOb-00025b-BH
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Electrum 2.0 has been tagged
X-BeenThere: bitcoin-development@lists.sourceforge.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <bitcoin-development.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=bitcoin-development>
List-Post: <mailto:bitcoin-development@lists.sourceforge.net>
List-Help: <mailto:bitcoin-development-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2015 23:50:39 -0000

I'd like to offer that the best practice for the shared wallet use case
should be multi-device multi-sig.  The mobile has a key, the desktop has
a key and a third-party security oracle has a third key.  The oracle
would have different security thresholds for countersigning the mobile.

This way you can have the same overall wallet on all devices, but
different security profiles on different keys.

That said, I do agree that mnemonic phrases should be portable, and find
it unfortunate that the ecosystem is failing to standardize on phrase
handling.

On 2015-03-11 04:22 PM, Mike Hearn wrote:
> Users will want to have wallets shared between devices, it's as simple
> as that, especially for mobile/desktop wallets. Trying to stop them from
> doing that by making things gratuitously incompatible isn't the right
> approach:  they'll just find workarounds or wallet apps will learn how
> to import seeds from other apps. Better to just explain the risks and
> help people mitigate them.
> 
> On Wed, Mar 11, 2015 at 3:57 PM, Aaron Voisine <voisine@gmail.com
> <mailto:voisine@gmail.com>> wrote:
> 
>     I'm not convinced that wallet seed interoperability is such a great
>     thing. There is a wide variability in the quality and security level
>     of wallet implementations and platforms. Each new device and wallet
>     software a user types their seed into increases their attack surface
>     and exposure to flaws. Their security level is reduced to the lowest
>     common denominator. I see the need for a "fire exit", certainly, but
>     we must also remember that fire exits are potential entrances for
>     intruders.
> 
>     Aaron Voisine
>     co-founder and CEO
>     breadwallet.com <http://breadwallet.com>
> 
>     On Wed, Mar 11, 2015 at 12:46 PM, Gregory Maxwell
>     <gmaxwell@gmail.com <mailto:gmaxwell@gmail.com>> wrote:
> 
>         On Wed, Mar 11, 2015 at 7:24 PM, Ricardo Filipe
>         <ricardojdfilipe@gmail.com <mailto:ricardojdfilipe@gmail.com>>
>         wrote:
>         > i guess you look at the glass half full :)
>         > even though what you say is true, we should aim for wallets not to
>         > require those instructions, by standardizing these things in BIPs.
>         > let's hope bitcoin doesn't fail in standards as our industries have in
>         > the past...
> 
>         There are genuine principled disagreements on how some things should
>         be done. There are genuine differences in functionality.
> 
>         We cannot expect and should not expect complete compatibility.
>         If you
>         must have complete compatibility: use the same software (or
>         maybe not
>         even then, considering how poor the forward compatibility of some
>         things has been..).
> 
>         What we can hope to do, and I think the best we can hope to do,
>         is to
>         minimize the amount of gratuitous incompatibility and reduce the
>         amount of outright flawed constructions (so if there are choices
>         which
>         must be made, they're at least choices among relatively good
>         options).
> 
>         ------------------------------------------------------------------------------
>         Dive into the World of Parallel Programming The Go Parallel
>         Website, sponsored
>         by Intel and developed in partnership with Slashdot Media, is
>         your hub for all
>         things parallel software development, from weekly thought
>         leadership blogs to
>         news, videos, case studies, tutorials and more. Take a look and
>         join the
>         conversation now. http://goparallel.sourceforge.net/
>         _______________________________________________
>         Bitcoin-development mailing list
>         Bitcoin-development@lists.sourceforge.net
>         <mailto:Bitcoin-development@lists.sourceforge.net>
>         https://lists.sourceforge.net/lists/listinfo/bitcoin-development
> 
> 
> 
>     ------------------------------------------------------------------------------
>     Dive into the World of Parallel Programming The Go Parallel Website,
>     sponsored
>     by Intel and developed in partnership with Slashdot Media, is your
>     hub for all
>     things parallel software development, from weekly thought leadership
>     blogs to
>     news, videos, case studies, tutorials and more. Take a look and join the
>     conversation now. http://goparallel.sourceforge.net/
>     _______________________________________________
>     Bitcoin-development mailing list
>     Bitcoin-development@lists.sourceforge.net
>     <mailto:Bitcoin-development@lists.sourceforge.net>
>     https://lists.sourceforge.net/lists/listinfo/bitcoin-development
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the 
> conversation now. http://goparallel.sourceforge.net/
> 
> 
> 
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
> 

-- 
devrandom / Miron