HelloZeroNet
/
ZeroNet
mirror of https://github.com/HelloZeroNet/ZeroNet.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Change --use_master_seed default: to False! 

https://github.com/HelloZeroNet/ZeroNet/issues/2512 

If anyone need to use a master_seed to generate private keys for sites in a range, than that person should use the config parameter --use_master_seed True. 

By default all user should backup private keys instead of generating a few million key in a limited private key space between 0x1 and 0xFFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFE BAAE DCE6 AF48 A03B BFD2 5E8C D036 4140.

While using a seed is good if any of the addresses get compromised from the range of generated private keys an attacker can compromise all and every site generated using that seed!

So, generate a new randomly-selected private key for each new address and let the user practice backing up private keys.
This commit is contained in:
War Criminal 2020-04-09 14:00:10 +00:00 committed by GitHub
parent 8ffd8d7a3e
commit 102784d291
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Config.py
View File

@ -122,7 +122,7 @@ class Config(object):
# SiteCreate
action = self.subparsers.add_parser("siteCreate", help='Create a new site')
action.register('type', 'bool', self.strToBool)
action.add_argument('--use_master_seed', help="Allow created site's private key to be recovered using the master seed in users.json (default: True)", type="bool", choices=[True, False], default=True)
action.add_argument('--use_master_seed', help="Allow created site's private key to be recovered using the master seed in users.json (default: False)", type="bool", choices=[True, False], default=False)
# SiteNeedFile
action = self.subparsers.add_parser("siteNeedFile", help='Get a file from site')