You are viewing a single comment's thread from:
RE: 20 SOLID REASONS TO STEEM on STEEMPEAK.COM
So SteemConnect has facility to use the posting key login ? Because In most of the apps, when it redirects to SteemConnect , it asks for the active key. Can you explain where it would need the active vs Posting key ? And is it on the app to decide that ?
Yes, the app decides which authorities to request from the user. It's totally possible to only allow the posting authority, or even LESS than that with SteemConnect!
The bad thing with SteemConnect, is that any app developer can use the authorities of users who logged in on their app. For example, I totally can upvote as all the people who logged in on DTube with SteemConnect. I will not do it, but I could.
Sometimes back I had raised this with dmania, and I was told, it was not possible, I wonder, why all the apps are not using this. And may be it could be restricted from SteemConnect as well, to force to use a posting key for apps.