Ledger live desktop update verification#

Even after a Slatepack is “signed” by a recipient, malicious software could always send its own valid response back to the sender (if the Slatepack doesn’t contain a payment proof).Ĭurrently, the only way that I know of to guarantee that a Slatepack was “signed” by the intended recipient is to have the Slatepack contain a payment proof. It seems unnecessary to require user confirmation on a hardware wallet when receiving Grin since doing so doesn’t guarantee anything.

But showing the User necessary information to decide, whether to sign or decline on the trusted screen. I wished for a required action on hardware wallet button, before signed information goes from (trusted) hardware wallet to (partly untrusted) desktop application. And user does not know if the wallet automatically tries to transport the slatepack reply back to sender. If your consider the desktop as as (partly) untrusted the information passed from the trusted device to the untrusted device automatically.

Continue button is clicked on Desktop window.Īt 10:44 Desktop window suggests “you received 9.970156” and also shows slatepack reply without any need to push a button on hardware-wallet. (button pushed on Hardware wallet.)īut the Address seems to be irrelevant since it is not used on sender side or for transportation of slatepack message.Īt 09:52 first slatepack message is copied from sender wallet to Ledger Live Desktop window.

Ledger live desktop update verification#

First I highly appreciate progress for grin ledger support.Īt 09:21 i see verification of slatepack address on hardware wallet.