Content
@
0 reply
0 recast
0 reaction
woj
@woj.eth
what is the golden standard for self custody personal setups these days? currently thinking 2/3 multisig with 2 hot wallets across 2 devices and 1 ledger what is yours?
17 replies
2 recasts
16 reactions
Haardik
@haardikkk
The setup you’re describing sounds good to me - perhaps will change in the future with passkey-based AA wallets over ledgers though given their recent controversies
2 replies
0 recast
0 reaction
ɃΞrn
@b7
so you think having something encrypted on a cloud server (passkey) is better than a hardwarewallet?
1 reply
0 recast
0 reaction
Haardik
@haardikkk
#1 - Ledger has the capability to extract pvt keys from the device regardless of past marketing - https://decrypt.co/142044/ledger-delays-plans-private-key-recovery-controversy #2 - passkeys like Yubikey have nothing to do with being stored on a cloud server
1 reply
0 recast
0 reaction
ɃΞrn
@b7
#1 I read the ledger technical paper and the recovery paper, no need to post media news - without confirmation on the device no firmware update can be done #2 common passkeys usage is an impl of apple/google/ms of the webauthn spec, which use a cloud account. if you talk about the webauthn impl from yubico 👍.
1 reply
0 recast
1 reaction
Haardik
@haardikkk
yeah i'm not trying to fight about this, but it feels wrong to say HW Wallets are "better" because Ledger said, for a long time, theres no way for them to extract keys. confirmation reqd or not - it was supposed to not be possible. you read all the changelogs everytime?
2 replies
0 recast
0 reaction
ɃΞrn
@b7
if you are concerned about your security you better do the last question with any piece that touches your wallet. from signer sdk (passkeys, social, hardware etc) to aa sdk etc pp
1 reply
0 recast
1 reaction
Haardik
@haardikkk
100% - sometimes i wonder how many people who claim to be sovereign actually take all the steps required to do that
0 reply
0 recast
0 reaction
