3 ms·
Real zero knowledge would involve you controlling the private keys and either a "lose it and you really lost it" or shamir-escrow model. Then you wouldn't have
by Kostchei 8y ago
Real zero knowledge would involve you controlling the private keys and either a "lose it and you really lost it" or shamir-escrow model. Then you wouldn't have to rely on their security at all, just your control of the private key and airgapping of the escrow.
- sdenton4 8y ago...though the user experience of 'lose it and you've really lost it' has been shown not to work out so well... [citation: who-knows-how-many-millions of forever lost bitcoin.]
- justtopost 8y agoI still find that possibility better than most others. However emergency recovery codes seem to be an accaptable tradeoff on both sides.