Quote from: percocet on July 13, 2017, 12:38:51 PM

Quote from: 13Darko on July 13, 2017, 03:17:17 AM

Quote from: percocet on July 13, 2017, 02:56:43 AM

I don't quite understand forging on the web wallet. When I log in it says I am forging even though I never specified that anywhere. Is it enabled by default?

Also, when I log out I am give a choice between "Logout" and "Logout and Stop Forging". So if I choose just Logout and then shutdown the browser, the wallet is still forging?

That's right. It's enabled by default.

And if you logout, forging continues in the background, even if your browser is shut down.

Thanks for the explanation! Is it safer to NOT forge using the web wallet or does it not make a difference? I know when you login obviously your credentials are sent to the server but I"m wondering if leaving it on forging opens up some other attack vectors.

Well, according to the developer's words, it's not safe, unless you trust the node owner.

Quote from: Evil-Knievel on June 24, 2017, 11:31:30 PM

Quote from: Pink Panther on June 24, 2017, 11:18:54 PM

Quote from: Evil-Knievel on June 24, 2017, 08:09:41 PM

Quote from: bkeenan on June 24, 2017, 08:09:03 PM

To clarify - it is not safe to forge with the online wallet, correct?

Correct

why it's not safe?

BEcause t generate blocks, the client needs to know your passphrase - because every block you generate will need to be signed (on the node which you use for forging). If you use a local node, this is safe! If you use a remote node, you must trust it not to log your passphrase and empty your wallet at some point in the future.