fc.proto

Signers (rebranded as app keys) are extremely powerful, but I think they are becoming a disaster waiting to happen. Users are not aware how to manage them, and even if they were, there are no reliable tools to do so. 

Does anyone else share the same concerns? If so, what can we do to improve them?

Dad, geek, conversation liquidity provider. vrypan.net (home), /weatherxm (work), @l--o--l (fun). Also https://paragraph.xyz/@purplesubmarine

Is it any different from OAuth tokens to your X account?

Technowatermelon. Elder Millenial. Building Farcaster. 

nf.td/varun

It should be pretty easy to write a script that resigns your messages before removing your app key. 

We haven't prioritized this feature in Warpcast because it's not that important. Most users app keys don't have a lot of messages, and even if they do they are mostly old, so users dont care too much if they get revoekd.

Invalidation of content created by the key. I see a list of signers I have approved in WC, some of them are for apps that no longer exist, but I can't remove them, because I don't know what will be removed. And even if I did, what choice do I have?