2

I want to use a public cardano-wallet server running on mainnet, so I can connect to it and create wallets for users of my iOS app.

  1. How can I set up all transactions to be encrypted (over SSL) instead of over http?

  2. Does the server keep logs of requests, and if so, how can I clear them? (I don't want to save a local record of anything I receive)

  3. Are there any other security concerns?

Improve this question

1 Answer 1

Reset to default
6

In most cases, you should never manage users wallets with a hosted service. The whole point of a decentralized blockchain is that users are managing their own assets.

The best practice is to generate and keep the keys used in signing of a transaction within the iOS application managed by the user and use a hosted service to communicate with the Cardano blockchain (something like blockfrost.io or a hosted cardano-db-sync instance).

Improve this answer
2
  • 1
    What if I'm using cardano-wallet to generate the pass-phrase and set a password - where does this get set? I can't use blockfrost to create a wallet, and I don't want to be responsible for the wallet either.
    – Jeffrey Berthiaume
    Dec 29, 2021 at 23:21
  • 1
    Your code needs to generate the passphrase, your application needs to protect the keys with a password. The user must be responsible for the wallet.
    – Marek Mahut - StakeNuts ♦
    Dec 30, 2021 at 11:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.