[justsomeadvice0]

Sorry, but this is an absolutely terrible idea.

Signing things is cool. Humans on the internet should sign more things. But why in the world would you want to use the same key that can instantaneously shred the dollars in your bank account to ensure authorship of some edit on a website article? The UX for these two things should be incredibly different; instead you are setting people up to get phished and lose their savings.

[40four]

I mean, to your point, why in the world would anyone use a ‘hot wallet’ or any wallet with anything valuable in it for this purpose. You wouldn’t. You would make a dedicated wallet for signing Wikipedia transactions.

[duskwuff]

> You would make a dedicated wallet for signing Wikipedia transactions.

Then why does it need to be linked to the Ethereum blockchain -- or, indeed, to any blockchain -- at all?

[8organicbits]

Can I create 1000 empty wallets and endorse bogus edits 1000 times? It's really easy to create empty wallets at scale. What value does an endorsement like that have?

[justsomeadvice0]

Because they clicked a button in this incredibly intuitive UX that said "Sign wiki edit", and then clicked "Confirm".

I think you massively overestimate most users' grasp on cryptographic primitives...

[xinbenlv]

> justsomeadvice0@: But why in the world would you want to use the same key that can instantaneously shred the dollars in your bank account to ensure authorship of some edit on a website article?... It is a neat hack, that would fare tragically when applied to the masses.

You are right that neat hack doesn't always applied to the masses. The assumption that we will have the level of mass adoptions will be a dream. Today, it doesn't. and we are just exploring and option. it's totally possible that this is a bad idea. And we have options to mitigate that such as using ERC-5453 endorsement, or using "semi sig" which will be e.g. a signature that's half size of normal etheruem size etc. but there is a long way to go for the whole industry to improve its UX.

I think we envision a (long term) future where most fund are kept in contract wallets that operated under proper limits and multi-sig or signaure aggregation requirments.

[everfree]

Same as with a CA system, you can simply use a high-security key to delegate signing privileges to a lower-security subordinate key, then revoke when necessary. ENS natively allows for this pattern due to it supporting separate ownership and resolution addresses, and so it might make a good integration with a signing tool like this.

[World177]

Ethereum is a blockchain of computations. The fact that it also secures billions of dollars is evidence that the records, such as domains that represent an identity, are highly secure. In the same way that someone can't change who owns a balance, they also are not able to change who owns a blockchain based domain.