4 ms·
> All we store is an encrypted version of the user's master keychain Is the seed created and encrypted on the client or the server?
by mcdee 7y ago
> All we store is an encrypted version of the user's master keychain
Is the seed created and encrypted on the client or the server?
- prabhaav 7y agoThe seed is generated on the lambda, encrypted client side and stored in our database.
- jhunter1016 7y agoWe chose this method because it requires trust of just one entity (the lambda end point we provide) rather than trust of each app that might interact with SimpleID's SDK. If the seed phrase is generated client-side within an app, that developer could hold onto that seed and use it maliciously. Identities created through SimpleID can be used across multiple apps, so it's important to us that developers are only able to access data specific to their app (i.e. app-specific encryption keys).