bitcore-wallet-service
bitcore-wallet-service copied to clipboard
Email notification for when one of the copayers is recovered from a backup seed
I use a 2 of 4 wallet. This means that as long as no more than 1 of my backups is found, nobody else can spend my money. But if just one of my backups is found, someone could recover it an see my wallet without me knowing. I think it would be good if all copayers could got an email notification whenever any of the copayers is restored from a backup seed.
But wouldn't this give a false sense of security since an attacker could use the backup data to see your wallet without contacting BWS?
Also consider the case ownership of the wallet is shared. It could be not convenient to notify some users about others actions.
On Sat, Jan 16, 2016 at 1:22 PM Ivan Socolsky [email protected] wrote:
But wouldn't this give a false sense of security since an attacker could use the backup data to see your wallet without contacting BWS?
— Reply to this email directly or view it on GitHub https://github.com/bitpay/bitcore-wallet-service/issues/440#issuecomment-172220644 .
Sorry, I meant the word seed. They can't see anything unless they have all the extended public keys, which BWS provides in exchange for the seed, if I'm not mistaken.
@matiu what about just notifying that copayer? Or would the attacker be able to change the email address before? I guess not.