r/Monero•
endogenic

Request for feedback: Rolling viewkey deletion

Y'all,

What's up. MyMonero chief here.

Idea occurred to me a while ago. Not sure to what extent it's been discussed. But now that our scanning infrastructure is speedy af, I'm thinking we can reduce risk and improve privacy statements while retaining very similar UX by deleting viewkeys which have not been active in the past N months.

Thoughts / downsides / barolos?

Paul

Posted Mar 5, 2020, 8:39 PM UTC

1910
selstaXMR Contributor •

What would happen if someone logs back in again after he view key got deleted? Would it continue scanning from the last saved height?

I can’t think of any downsides.

4
endogenicOPXMR Contributor•

Just scan from 0, possibly, or yeah, last scan start can be preserved

5
bizmunny•

Only issue I can think of might be the sheer quantity of keys generated, given enough users opting in. 2^64 is not a huge space if keys are being rolled over on every wallet, too frequently.

1
rbrunner7XMR Contributor•

2^64 is not a huge space if keys are being rolled over on every wallet, too frequently.

Yes it is. I made a quick "back of the envelope" calculation: With that you can give every of the roughly 7 billion humans on Earth about 2.6 billion different wallets, if you just spread out the the key space. Not sure how to go on and calculate the chance of a collision from those number, but I am quite sure it's tiny.

(Human brains are not good with large numbers. I found out that in my particular case I can't really grasp something with good intuition beyond about a million.)

2
bizmunny•

Make sure you’re factoring in “birthday paradox”. May be an unfounded worry of mine, though.

Ultimately, would depend on implementation, you’re right. Just things to keep in mind

1
HoboHaxor•

Super dig the ephemeral view key. Would like a forever and ephemeral key options.

.

3
bizmunny•

This is a great idea.

3
faulkmore2•

Only if there is a flag to turn on this feature.

So an opt-in feature.

I for one would prefer it off.

2
endogenicOPXMR Contributor•

noted

1

Good idea. Could be cool to have an option to "log out and delete view key".

1