T8493 Posted August 4, 2016 Share Posted August 4, 2016 (edited) GateHub TOS says: Quote Your Ripple Wallet is protected from unauthorized access and use by others via a secret key and password held by you alone. GateHub does not have access to your secret keys (we store them in an encrypted state). All account information except these secret keys can be restored. Questions: If all "account information except these secret keys" can be restored, then the password can be restored, too. Is this true? This doesn't sound ok. So how does GateHub store passwords? When I enter my password on signin.gatehub.net, the password is sent to a server in a non hashed form. Does this mean that GateHub can use this password to decrypt my secret keys (on their computers, not in the browser)? If they can do it in the browser, then they can do it on their computers, too. I thought GateHub didn't have access to secret keys (except in the browser). It looks like the secret keys are encrypted with some master key. What is the point of this master key if GateHub can access passwords in non hashed form? What happens to an old master key when I change the password? Is it permanently deleted from GateHub servers? Is it deleted from backups, too? What happens to an (encrypted) account secret if I delete Ripple account from my wallet? Is it still stored? Is it deleted from backups, too? Quote If You lose your GateHub Recovery key and Password, we will have no way of restoring your native wallets, and any funds in those wallets will be lost. What is GateHub recovery key and how can I obtain one? How does this recovery key work? What does it decrypt? Who knows this GateHub recovery key? It looks like this information is missing from the TOS. Edited August 4, 2016 by T8493 MundoXRP and Global 2 Link to comment Share on other sites More sharing options...
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!Register a new account
Already have an account? Sign in here.Sign In Now