Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create account with a different recovery account #3242

Open
Transisto opened this issue Jan 26, 2019 · 6 comments
Open

Create account with a different recovery account #3242

Transisto opened this issue Jan 26, 2019 · 6 comments

Comments

@Transisto
Copy link

Would need that to be able to more easily create accounts by not having to handle account recovery.

@Gandalf-the-Grey
Copy link
Contributor

You don't have to handle account recovery. It's just that creator is also the default recovery_account for account it created.
How account recoveries are handled depends on a ToS of account creator, including not handling them at all.
Accounts created by Steemit, by default has steem as recovery account, but if I create an account for someone, and they change their own recovery account to steem it doesn't change anything, because Steemit Inc has no ways to tell which recovery requests for that account are valid and which not.

@syvb
Copy link
Contributor

syvb commented Feb 28, 2019

It would still be nice to be able to set the recovery account at creation, without a 30 day wait. A account creation service might not want to handle account recovery, so they might set the recovery partner for accounts they create to (for example) the top witness. If this can be set at account creation, then the users with new accounts will always have a willing recovery partner.

@Gandalf-the-Grey
Copy link
Contributor

I just stumbled upon same request here: #3242
Question is, if problem that it is trying to solve, couldn't be solved in a better way
If bob creates account for alice and wants charlie to be her recovery partner, why not let charlie to create account for alice?
Isn't "claimed accounts market" something that you are looking for instead?

@TimCliff
Copy link
Contributor

TimCliff commented Mar 1, 2019

Also requested in #3181

@mvandeberg
Copy link
Contributor

I am still not sure if I understand the actual use case for this. Is it that you don't want to be responsible for account recoveries? Or that you want to create accounts, but then make someone else responsible?

If it is the later, are you partnering with someone that wants to do the recovery, in which case, why not have them create the account and you reimburse them for it? Or delegate SP to their faucet (with SMTs, you can delegate just the RCs). Or are you just setting some random account or other faucet as the recovery partner without informing them. It is the later I am concerned about. Users could miss out on important security features by signing up with the wrong faucet.

@mvandeberg
Copy link
Contributor

From @TimCliff on #3181

If you change the recovery account, it takes 30 days before it goes into effect.

Here is the reason: assume Alice’s account is hacked. Alice needs to be able to initiate an account recovery to get her account back. If the hacker could immediately change the recovery account, then Alice would not be able to complete an account recovery.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants