Steeminvite temporarily closed
Steemconnect V1 has been shut down today. Due to this, logins to Steeminvite are not possible any more at the moment.
I had been thinking about switching to V2, but decided against it. I'm not a huge fan of sharing authorities with every site one uses, while it's not obvious which authority was used to sign a transaction.
Instead, I will modify it to sign in with the posting authority directly. Users have to trust the app with their active authority later on anyway. I'm already quite busy this week so it could take a bit, but not longer than the weekend.
looking forward to being able to do it with just posting key
thanks a lot!
Yes I did a whole post sseries on how I opened an Instant Invite Link Hotline, for anyone whose been waiting weeks to get ino steem, I make them ainn instant account but its ALL thanks to @pharesim
https://steemit.com/steemit/@ackza/20180225t225447255z-post
So yeah I announced my new Steem instant account creation hotline, and it really is starting to pickup steem lol I postd it on the steemit subreddit so I hope I can upvote @pharesim and get him ome suppp[ort so I can help do whatever I need... To help him fix this... And I notcied he said it would get fixed before the weekend is ver.,.. And I am gratefull....
Thank you so much pharesim!
Hey sorry for the prompt interruption. FYI SteemConnect v1 is still available here http://sc1-master.herokuapp.com for 10 more days. SC2 dont require for user to add posting authority if you just need to verify his identity and use the
scope=login. Let me know if i can help.Thanks for the feedback! As mentioned above, people need to provide their active key in the process anyway, there's no need for a 3rd party to auth anyway.
Good to know for future projects though!
Thank you for up vote and visit my post, thank you very much. @fabien
Please do make a post like this when you are done with it. thanks.
Thank you for the service so far. I have created some greats and many poor accounts through the service, but I'm truly happy you have made it for us to use.
i have a question @pharesim. how much do i have to cost for a account in steeminvite??????
Just the blockchain's creation fee, that's 0.1 Steem and a delegation of 14.5 SP at the moment.
And for how long the delegation will have to be made?
And why not turn it into v2. ? Is there a problem with that? @pharesim
as I said in the post
Yes thanks I've seen it
So... steemconnect v2 sucks? I'm always uncomfortable when sites ask for this and that when they should just need the posting key. Guess I'd be more well-read on all of this if I had more assets at risk because I have no idea what you mean by that statement.
No, it doesn't generally suck. In most cases it's a good alternative.
Security always is a trade off.
When you give out your keys, they can be stolen. This is a problem when new apps show up, as they may not be trusted by the general userbase and thus won't be used.
Steemconnect V2 doesn't require your keys, but adds another account to your list of authorities, so it can act in your name. Every app using steemconnect has an own account for that, so you always have an overview who you share your authoritiy with.
The downside here is that with a long list of authorities, it's not immediately obvious which one performed an action. They can post or vote in your name without you being online. And there have been a few cases already where apps used this without explicit user consent.
I don't think it's necessary for me to use steemconnect for trust reasons (they don't support the create action, so you'll have to enter the private active key later anyway), and deem it the better choice to not give away any rights permanently - the keys remain on the user's device, and are only used to verify the identity/sign the transaction at account creation.
Yeah, that agar.io clone I've been playing needed the active key when supposedly it just needs to post a message for you in each game's thread, I asked about it and haven't received word back. That makes me uneasy, but I don't have any liquid funds so I didn't care.
I think I get what you're saying, if an independent use of the private key is happening in the first place with steeminvite then not having it connected through steemconnect is actually safer in case steeminvite itself actually gets compromised, right? Especially considering most users won't manually de-authorize it after it's no longer needed.
I've noticed that when I post on busy for example I can't see it was posted on busy, the [] is not comforting at all.
Thank you for your responses, and steeminvite was seemless when I used it, so thank you for making it in the first place and keeping us in the loop.
You don't need to give posting authority though. You can sign one-off actions and require interaction with steemconnect at every action, no? Seems like a great fit for steeminvite.
e.g. steembottracker and smartsteem both follow this pattern.
Unless I'm missing something.
The only transaction to sign, create_account_with_delegation, is not supported by them anyway.
Oh, well that certainly kills it :)
I think so per you provide us great sirvice, thanks @pharesim
I have a newbie question. I want to know if v2.steemconnect and steemconnect are the same thing or different?
@
roselover
Thanks my Boss...