Notify about option to CoinJoin

[MaxHillebrand]

Problem

Currently, there is nothing that suggests to a user that he should CoinJoin. There is the CoinJoin tab, but no call to action. A n00b user might not even know that 1] he has a privacy problem, and 2] that he can CoinJoin to fix it.

Solution

If the wallet contains unmixed [anonset < 2 ; or anonset < green check-mark target?] coins, larger than the minimum CoinJoin amount, [check this upon wallet load and when receiving coins] throw an interactive notification in the bottom right corner:

Danger! You have non-private coins. Do You want to CoinJoin to reclaim Your privacy?
[This wording might be too pushy... maybe someone knows a better call to action?]

This is an interactive notification [it is implemented in Avalonia and thus possible, but not yet used in Wasabi], so the user has two options.

• If user clicks No, then the notification closes and nothing happens.
• If the user clicks Yes, and types in his password inside the notification box, then all unmixed coins are enqueued for CoinJoin in the background, and the CoinJoin tab opens.

Benefits

• The user is notified that he has a privacy problem, without him needing to understand anonymity set or the shield logic.
• The user still has the option to not CoinJoin, so he is not forced to do so. [maybe even this type of notification can be turned off in the settings for advanced users]
• The user is presented with a one-click solution to his problem. He does not need to do coin selection and worry about the minimum denomination. He simply types in password and clicks.

[nopara73]

NACK. IMO this is scammy.

[yahiheb]

A n00b user might not even know that 1] he has a privacy problem, and 2] that he can CoinJoin to fix it.

If that is the case then it is better for the user to learn about privacy and CoinJoin first before "pushing" them to CoinJoin.

[yahiheb]

Would you accept a notification on your OS saying click yes to fix X problem that you don't even know about and pay money for that?

[MaxHillebrand]

To quote Anonymity Loves Company, a paper we read in the research club:

Optional security, once disabled, is often never re-enabled.

The option to CoinJoin is by default and always deactivated, unless the user takes action for every individual CoinJoin, and there is never a notification to do so.

Inconvenient security is often abandoned in the name of day-to-day efficiency.

It is much more convenient to be notified when a CoinJoin is possible, and then to do it with password and one click, compared to the current setup.

Improving documentation only helped the users who read it. We changed Tor to warn users who provided an IP address rather than a hostname, but this warning usually resulted in several email exchanges to explain DNS to the casual user, who had typically no idea how to solve his problem.

As much as I love the Wasabi documentation - it is not enough. @yahiheb brings up a good point, that the notification should also include a link to the documentation CoinJoin chapter.

Most users stay with default configurations as long as they work, and only reconfigure their software as necessary to make it usable.

The current default is to not CoinJoin!

@yahiheb brings up another good point with and pay money for that, and this is the essential difference with network anonymity systems [like Tor], compared to Bitcoin privacy and Wasabi: You need to pay money for it. Thus I definitely agree that we cannot do CoinJoin by default even without user interaction - the user needs to always agree that he wants to do CoinJoin and that he is willing to pay for it. However, this does not mean that there should be no notification that the user is under privacy risk, and that he has available tools to fix it.

[yahiheb]

This notification will be very annoying for a user who simply wants to use Wasabi as his default wallet without CoinJoin.

[MaxHillebrand]

This notification will be very annoying for a user who simply wants to use Wasabi as his default wallet without CoinJoin.

Agreed @yahiheb, thus I would add an option to disable the CoinJoin call to action, in the advanced setting for those who know what they're doing. Maybe some Don't show this again check box in the notification it self?

[MaxHillebrand]

very obsolete :)