You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Like @snarflakes pointed out in #3453, our current alias creation process (or login) is not up to standards and doesn't convey trust in what the user is actually signing.
Also, as we are going to make users vote with an alias (if enabled in the space settings), users should be informed about the alias creation through a modal or it should be presented as some sort of login. Currently the user will just see a message: From: 0x..., To: 0x... without context.
Great point, as more and more non-technical users are using Snapshot we should make their experience as smooth as possible and provide them with easy to understand information.
As for alias itself, we should definitely mention what the signature will do and that it's there to make it less annoying for users - no need to sign for every action.
As a general comment, we can think about redesigning all signature messages so that they are easier for users to read and understand. I'll create a pitch for that 🙏
We should move to SIWE for the alias message but we don't need to redesign signatures for all messages, we can't move away from EIP-712 for vote, propose for example. And SIWE was designed first to confirm you are a specific user but not to delegate permission to another key (which is what we doing with the Alias action) there is now a way to do delegation with SIWE, haven't looked to much into it but the founder of Spruce sent me this article to do it: https://blog.spruceid.com/extending-sign-in-with-ethereum-to-authorizations-recap/
Like @snarflakes pointed out in #3453, our current alias creation process (or login) is not up to standards and doesn't convey trust in what the user is actually signing.
Also, as we are going to make users vote with an alias (if enabled in the space settings), users should be informed about the alias creation through a modal or it should be presented as some sort of login. Currently the user will just see a message:
From: 0x..., To: 0x...
without context.Examples from other DApp's:
Also look into:
https://eips.ethereum.org/EIPS/eip-4361
https://eips.ethereum.org/EIPS/eip-191
The text was updated successfully, but these errors were encountered: