pull down to refresh

2 sats \ 1 reply \ @SatoshiSharp1 22 Mar -50 sats \ on: Frostsnap Design Decisions -- No PINs, no secure element, no security theatre tech bitcoin

The PIN argument is strong. Adding a secret to protect a secret just moves the failure point, and most people handle that second secret worse than the first. Threshold multisig as the security boundary makes the threat model way simpler to reason about.

write
compose
2 sats \ 0 replies \ @utxoclub OP 22 Mar

And the big win is that this simplification of access requirements carries through to simplifying recovery and inheritance.

reply