From 102784d291a367df5f0b65a1a7cd365167225a4a Mon Sep 17 00:00:00 2001 From: War Criminal <63407840+warcriminal@users.noreply.github.com> Date: Thu, 9 Apr 2020 14:00:10 +0000 Subject: [PATCH] Change --use_master_seed default: to False! https://github.com/HelloZeroNet/ZeroNet/issues/2512 If anyone need to use a master_seed to generate private keys for sites in a range, than that person should use the config parameter --use_master_seed True. By default all user should backup private keys instead of generating a few million key in a limited private key space between 0x1 and 0xFFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFE BAAE DCE6 AF48 A03B BFD2 5E8C D036 4140. While using a seed is good if any of the addresses get compromised from the range of generated private keys an attacker can compromise all and every site generated using that seed! So, generate a new randomly-selected private key for each new address and let the user practice backing up private keys. --- src/Config.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Config.py b/src/Config.py index 2bd9c44b..152322ed 100644 --- a/src/Config.py +++ b/src/Config.py @@ -122,7 +122,7 @@ class Config(object): # SiteCreate action = self.subparsers.add_parser("siteCreate", help='Create a new site') action.register('type', 'bool', self.strToBool) - action.add_argument('--use_master_seed', help="Allow created site's private key to be recovered using the master seed in users.json (default: True)", type="bool", choices=[True, False], default=True) + action.add_argument('--use_master_seed', help="Allow created site's private key to be recovered using the master seed in users.json (default: False)", type="bool", choices=[True, False], default=False) # SiteNeedFile action = self.subparsers.add_parser("siteNeedFile", help='Get a file from site')