Comment on Proton Now Has a Bitcoin Wallet
GenderNeutralBro@lemmy.sdf.org 4 months agoAre there any that are cloud-hosted, secure, and private? My experience is limited, but I’ve never found an easy way in. I can’t imagine anyone who’s not tech-savvy getting started without walking through a minefield of scams.
Every now and then I look at options for how I might actually use crypto, and everything looks either outrageously scammy or way too much trouble. Pretty much every exchange I’ve looked at holds the keys to your account, and several have gone under or outright stolen their users’ funds.
The question is, when Proton embraces bitcoin, should it make me trust bitcoin more, or trust Proton less? I don’t know. I’m still skeptical. Their blog post is interesting, but also doesn’t answer a lot of questions. proton.me/blog/proton-wallet-launch
I mean, look at this:
Buy Bitcoin securely in 150+ countries
If you are new to Bitcoin, Proton Wallet also has integrations that make it easy to buy Bitcoin in 150+ countries, and we have also put together a comprehensive Bitcoin guide for newcomers.
That “comprehensive” guide spends three paragraphs talking about the “Blocksize War”, and makes absolutely no mention of how a user can actually buy bitcoin using Proton Wallet. WTF, Proton? Who is your target audience here exactly?
jarfil@beehaw.org 4 months ago
Until homeomorphic encryption becomes a thing, cloud can’t be secure or private.
Exchanges, are not wallets. You’re supposed to move the coins out of the exchange for safekeeping. If you can’t, then it’s not a crypto exchange, it’s an ETF peddler.
Wallets, are not exchanges. They can link to exchanges, like Metamask does, but their core function is to hold your keys.
cadekat@pawb.social 4 months ago
Why do you need homeomorphic encryption? Isn’t client-side encryption good enough for most use cases?
GenderNeutralBro@lemmy.sdf.org 4 months ago
Yes. Homomorphic encryption is for data processing, not data storage.
cadekat@pawb.social 4 months ago
I am aware. What processing is only possible in the cloud, and not locally?
jarfil@beehaw.org 4 months ago
Client-side is not cloud.
Yes, you can keep client-side reasonably secure. You can’t send the data for cloud processing and seriously expect much security or privacy… for now. Encrypt client-side and use cloud as storage… maybe; encryption algorithms also have a “best by” date.