0 reply
0 recast
0 reaction
6 replies
16 recasts
144 reactions
1 reply
0 recast
10 reactions
1 reply
0 recast
1 reaction
1 reply
0 recast
1 reaction
1 reply
1 recast
1 reaction
1 reply
0 recast
1 reaction
2 replies
0 recast
2 reactions
1 reply
0 recast
2 reactions
The whitelist is based on the "app" that needs access to DCs not on the wallet, so the wallet in theory won't matter, when doing a signature you can't do it from anywhere.
At this stage of the proposal is not clear how a whitelist can be enforced, SWIF in V1 is also technically limited only to Warpcast but you can spoof it using the Warpcast infrastructure and pass it with any wallet, people(over 300+) have been able to do SWIF with Clear Wallet for many months, so, in the end, whitelist might be even ineffective against spoofing anyway.
Like with the mini-apps before there was also a whitelist, but that was enforceable with domain, though in some cases like Paragraph enforceability also depended on all whitelisted domains if a single domain didn't do the validation correctly it could have been hijacked, that's exactly what I did with Paragraph that had improper validation and anyone could have used their whitelist to inject any content they wanted. 0 reply
0 recast
2 reactions