Farcaster Devs

cypherpunk wannabe, engineer working on @frames /open-frames /opencast
https://stephancill.co.za create stories at https://stories.steer.fun

Developer 🤓 build, develop and operate Farcaster solutions @ dtech.vision also love tech, decentralization, fitness and oldschool rap 😎

I'm worried that Signers are not automatically expiring at some point.

This is a common practice in web2 (for API keys / tokens) and I believe Farcaster would greatly benefit form this as well (using a Farcaster epoch based timestamp).

any thoughts on this @stephancill  @samuellhuber.eth ?

Something that concerns me about the fc signer architecture is how it increases the attack surface area for your account the more apps you allow to sign on your behalf

This limits the propensity for users to try new apps especially if they have a large audience

Solutions: portable signers? Permissions? Sessions?

some discussion about this here

https://warpcast.com/stephancill/0xc6023bd1

Dad, geek, conversation liquidity provider. vrypan.net (home), /weatherxm (work), @l--o--l (fun). Also https://paragraph.xyz/@purplesubmarine

happy to see that this has been already discussed in some sort!
deactivating a signer sounds super interesting ( which was brought up by @vrypan.eth ). Generally speaking is this a topic that's currently discussed somewhere?