RE: Busy: Your next-gen social network platform based on the Steem Blockchain

[timcliff]

This is very cool! Can you elaborate on how the security works though? As a user, I am very wary to enter my private key information into any third party site - even though you all seem like a very trustworthy bunch :)

Comments

[ekitcho]

Everything will be through SteemConnect. We plan to announce in detail in the next few days how everything works ;), basically,

1. You connect on steemconnect and enter your password or posting key
2. Posting key is encrypted with CRSF Token in front end
3. It’s sent to Steem Connect server who will decrypt it
4. Posting key is encrypted with a secret key that only the server knows (using AES)
5. A cookie is created for the users with his posting key

We are trying to build the best flow for security that's why the SteemConnect project is Open Source and will be reviewed by the whole dev community
thanks for your support @timcliff

You can also contact @fabien on Steemit.chat for more information, he s more qualified to answer technical questions

[timcliff]

Thanks for your response :)