SteemConnect 3: A better way to sign
Dear Steemians,
As announced in our previous post we are working on SteemConnect 3, this new version will be improved in many ways. This is the first in a series of posts that aim to explain and go through the changes we are implementing.
The most fundamental change from previous versions is the switch to the Steem URI protocol standard for signing transactions. This has huge benefits to both users and developers. Users no longer need to trust a single point of failure with their keys, they can choose from any wallet that implements the standard. Developers can build their applications with SteemConnect without any fear of vendor lock-in, they can always roll their own implementation of the standard and keep all existing users.
SteemConnect 3 will be a layer on top of this protocol offering applications and services that makes it easy to use for both users and developers.
The signing portal
The current SteemConnect website will be replaced with what we call a "Signing portal". It is the place users land when an app asks them for a signature. From there they can scan a QR code to sign with their mobile or click a steem:// link to open a Steem wallet app that they have installed on their device. There will also be an option to sign directly in the browser for users that don't have a wallet set up yet.
The signer apps
SteemConnect will offer signing applications for all major platforms. First out will be desktop apps for macOS, Linux and Windows followed by browser extensions and later mobile apps for iOS and Android.
You can think of these apps as minimalistic Steem wallets, they will implement key storage and the signing protocol. It is our hope that other Steem wallets will adopt the signing protocol as well.
JavaScript SDK
The SteemConnect JavaScript SDK is being updated with some great features that help developers take advantage of the steem:// protocol and SteemConnect 3 services. For example it will be possible to directly call out to the browser extension or desktop app to sign a transaction for users who are already set up, creating a seamless experience.
In the next post we will cover the improvements we are making to the posting APIs and how SteemConnect 3 will be more decentralized and resilient.
Peace & love,
The SteemScript team
We are adopting steem uri into eSteem Surfer and eSteem Mobile as well with
esteem://as well as withsteem://, in few iteration I am sure we will have full support of specs. Keep up the great work guys, let me know if need a hand on anything ;)This is awesome!
This is great guys! I really think that this is the way to go. :)
But do you know about Scatter? It is already being developed, just needs the integration of STEEM blockchain... it could be easier than implementing it from scratch. And also the steem url way has some limitations as stated below...
Check out what Nathan published about his move to a desktop/mobile app approach here:
https://medium.com/@nsjames/the-blockchain-isnt-just-for-web-applications-silly-rabbit-926a4ea5ccd1
If you guys need a hand, just let me know...
I disagree about the limitations of uri schemes stated in that article. Having callback url's does not exclude native applications at all (they can just have their own uri scheme to deep link back into). I'm also very sceptical that Scatters web socket server is a good idea. For example you can never keep your keys on your phone to sign for a desktop app and it will never work on iOS because you can't run that server in the background there.
URIs have additional benefits as well. You can print a "Follow me" T-Shirt with a QR code or create a point of sale system that customers can use with RFID.
I see your point there... And after some investigation I have to agree with you! :)
What about other blockchains, like Bitshares or SounDAC? Couldn't we do something like this that would cover all the graphene blockchains, or even to others?
Do you have a github to where I can contribute?
I have one main concern, that is tied to the reason why I never implemented SteemConnect in the first place... Will SteemConnect 3 maintain the Authority sharing on the users accounts? Or will that not be needed anymore?
Since I don't understand the technology completely I'd love to know how similar this is to KeyChain to it can give me a bearing for what steemconnect3 will be like. I understand that you're going to do something that facilitates more than just chrome which is great.
Also could an extension like keychain do a couple things to be the chrome app we use to interface with steemconnect3 i'm pretty used to it but if more apps integrate steemconnect3 I'd be using that anyway.
Finally is there any possibility to withhold a permission from an app or even give that app the ability to give the user the choice? There's a lot of talk of extended access to Posting key. Per need basis no one has problems with but with steemmonsters cards being a posting key thing for transfers those users may not want to give steempeak for example extended access to use the posting key and they'd understand they'd give up some of those features that need extended posting key access but it could be their decision to not have those features in return for feeling more safe about their cards.
Anyway maybe i'm not thinking about it correctly, just trying to get a grasp.
Well i guess i'll bump the comment... since @steemscript or @fabien may not have seen it... we are honestly considering it at @steempeak and @peakmonsters so i do have some questions and just want to understand it better.
Hey @jarvie sorry just caught your message, here is some answers hope it helps:
Sounds great!
$rewarding 80% 14min
I resteemed this article. Thank you for the Steemit community.
Posted using Partiko iOS
Congratulations @steemscript! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click here to view your Board of Honor
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard:
Congratulations @steemscript! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click here to view your Board of Honor
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard:
Hey team, I hate to be that guy, but do you have an intended timeline? I'm currently working on code for my own Dapp, I'm a couple of months away from MVP, and wondering if I should wait for SteemConnect 3, or start working on implementing SteemConnect2 and switch over later...
We will implement the changes incrementally, there will no breaking changes for apps already integrating SC2 so you don't need to wait, if there is some required changes to do for apps it will be trivial.
Congratulations @steemscript! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click here to view your Board of Honor
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard:
To listen to the audio version of this article click on the play image.
Brought to you by @tts. If you find it useful please consider upvoting this reply.