Middleman

Wallets for users that don't have a web3 enabled browser.

2 followers

Wallets for users that don't have a web3 enabled browser.

2 followers

Visit website

Middleman is a crypto wallet API. As 😍as GET /wallet.

Launch tags:Tech•Web3

Launch Team

Render Sandboxes: a computer for every agentRun untrusted code safely. Idle sandboxes cost nothing

Promoted

Hyper Online

This looks super cool Dani 😊 I’m not totally sure, but middleman looks lIke It’s a custodial wallet. Could you talk a bit about the threat model you’ve been thinking through? Do you have any assurances that the creator of the wallet is the only one who is able to spend?

Report

8yr ago

Jam

Maker

Thanks @andrew_breck! There are two security models I am thinking about. The first is how to safeguard private keys. The second is how to guard against malicious developers who can request transactions on a user’s behalf. For private keys, I’m currently storing them encrypted in a database but clearly more can be done to protect them. One option I started to explore yesterday is to use Keybase as a backend as they have a smart security team already solving this challenge. As far as malicious developers go, I don’t believe I introduce anything new. Developers already get access to user passwords, messages, and payment information depending on the type of app so users already implicitly trust developers. I’m very open to ideas on both. Feel free to reach out: I’m mayor@dani.town.

Report

8yr ago

Berkey

Very interesting project, wallet connection is a major issue for dApp adoption, while there are things like WalletConnect standards in the pipeline, this approach could be even more user friendly. A few points of my understanding of it, pls correct me if i am wrong. 1. dApps can use your API to create wallet for users instead of rely on web3 connection to existing wallets like metamask. So the wallets shifts from current solution of integrate with browser/as a plugin to integrate directly with the dApp. 2. since private key is stored with you and managed via API, it is up to the dApp to authenticate user and to give them access to their wallet. 3. when user is authenticated, they have full control of their user wallet thus if dApp end auth is compromised, user's wallet is compromised.

Report

8yr ago

Reviews

Hyper Online

Report

8yr ago

Jam

Maker

Report

8yr ago

Berkey

Report

8yr ago