Skip to main content
Stellar

Return to Question

capitalization, thanks removed as per https://meta.stackexchange.com/q/2950/295232
Source Link
edit approved Jun 6, 2020 at 10:27
Glorfindel ♦
edit approved Jun 6, 2020 at 10:27
Glorfindel ♦
  • 441
  • 2
  • 3
  • 23

I'm working on a stellarStellar-based app. Part of our protocol requires us to submit transactions from users accounts. We'd prefer to have users enter their secret keys when their accounts need to submit the transactions. Then we wouldn't need to store the secret keys. What would be the best way to securely pass the users secret key between the user, us, and stellarStellar? Is caching the key on the users device considered secure?

Alternatively, would it be considered more secure to have users set up accounts on our application that are associated with stellarStellar accounts that we store the secret keys for?

Thanks

I'm working on a stellar-based app. Part of our protocol requires us to submit transactions from users accounts. We'd prefer to have users enter their secret keys when their accounts need to submit the transactions. Then we wouldn't need to store the secret keys. What would be the best way to securely pass the users secret key between the user, us, and stellar? Is caching the key on the users device considered secure?

Alternatively, would it be considered more secure to have users set up accounts on our application that are associated with stellar accounts that we store the secret keys for?

Thanks

I'm working on a Stellar-based app. Part of our protocol requires us to submit transactions from users accounts. We'd prefer to have users enter their secret keys when their accounts need to submit the transactions. Then we wouldn't need to store the secret keys. What would be the best way to securely pass the users secret key between the user, us, and Stellar? Is caching the key on the users device considered secure?

Alternatively, would it be considered more secure to have users set up accounts on our application that are associated with Stellar accounts that we store the secret keys for?

Source Link
user2988
user2988
  • 21
  • 1

Best Practices for Securing Secret Keys in a Tier-3 DLT App Built on Stellar

I'm working on a stellar-based app. Part of our protocol requires us to submit transactions from users accounts. We'd prefer to have users enter their secret keys when their accounts need to submit the transactions. Then we wouldn't need to store the secret keys. What would be the best way to securely pass the users secret key between the user, us, and stellar? Is caching the key on the users device considered secure?

Alternatively, would it be considered more secure to have users set up accounts on our application that are associated with stellar accounts that we store the secret keys for?

Thanks