dido:public:ra:xapend:xapend.b_stds:defact:ethereum:eip:erc_0107
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
|
dido:public:ra:xapend:xapend.b_stds:defact:ethereum:eip:erc_0107 [2021/08/13 13:08] murphy |
dido:public:ra:xapend:xapend.b_stds:defact:ethereum:eip:erc_0107 [2021/08/18 11:19] (current) murphy |
||
|---|---|---|---|
| Line 23: | Line 23: | ||
| //Currently, if a user navigates to a dapp running on a website using her/his everyday browser, the dapp will by default have no access to the rpc api for security reasons. The user will have to enable CORS for the website’s domain in order for the dapp to work. Unfortunately if the user does so, the dapp will be able to send transactions from any unlocked account without the need for any user consent. In other words, not only does the user need to change the node’s default setting, but the user is also forced to trust the dapp in order to use it. This is of course not acceptable and forces existing dapps to rely on the use of workarounds like:// | //Currently, if a user navigates to a dapp running on a website using her/his everyday browser, the dapp will by default have no access to the rpc api for security reasons. The user will have to enable CORS for the website’s domain in order for the dapp to work. Unfortunately if the user does so, the dapp will be able to send transactions from any unlocked account without the need for any user consent. In other words, not only does the user need to change the node’s default setting, but the user is also forced to trust the dapp in order to use it. This is of course not acceptable and forces existing dapps to rely on the use of workarounds like:// | ||
| - | * //if the transaction is a plain ether transfer, the user is asked to enter it in a dedicated trusted wallet like “Mist”// | + | * //if the transaction is a plain ether transfer, the user is asked to enter it in a dedicated trusted [[dido:public:ra:xapend:xapend.a_glossary:w:wallet|wallet]] like “Mist”// |
| * //For more complex case, the user is asked to enter the transaction manually via the node [[dido:public:ra:xapend:xapend.a_glossary:c:cli]].// | * //For more complex case, the user is asked to enter the transaction manually via the node [[dido:public:ra:xapend:xapend.a_glossary:c:cli]].// | ||
dido/public/ra/xapend/xapend.b_stds/defact/ethereum/eip/erc_0107.1628874535.txt.gz · Last modified: 2021/08/13 13:08 by murphy
