Good question - We never ask for your owner or active key, only your posting key. Your posting key gives us access to only post/vote on your behalf. The only time our server sees your posting key is immediately after you login and whenever it is needed to perform an action. Unencrypted posting key are never written to disk, only stored temporarily in RAM. To protect your posting key from being compromised we use the highest possible key length to encrypt it using the well-tested blowfish algorithm. From time to time we will also revoke all capabilities and switch encryption keys.
Posting keys can NEVER be used to touch any funds in your account.
I'm glad to see you are taking the storage of keys very seriously even if they are only posting keys.
I was going over the responsibility of hosting keys securely with a friend earlier today when discussing a new Steem based project. I was thinking of an encryption solution like you described but I think you just solved all my issues. I'll just let you host the keys.
Thanks!
When you have time would you explain what "vote on your behalf" means exactly? Just like it sounds I'm sure tho, as in Vote Like A Bot? (good dot com for ya maybe)
Basically I can go to work or to sleep and SteemPower.org willjust upvote articles automatically, and I get paid?
Essentially, we are building SteemPowerTrail so you can follow the trail of curators who vote on good content or you can donate voting power to @curie or @robinhoodwhale
More information: https://steemit.com/steemit/@charlieshrem/steempowertrail-alpha-follow-curators-and-your-favorite-authors-donating-all-my-voting-power-to-curie
Yup I remember that, thanks for the clarification.
Well in my few weeks here I've never voted for a witness, and I'm even a but sketchy on exactly what it means (hence the non-voting so far) but you just got my first one. You do tons here to make it better, thanks greatly, and I hope my vote helps you help others.
It means just what it sounds like: an external app can get permission to upvote on your behalf. Once it has that permission it can indeed do it while you sleep.
Right, I was mainly asking the "and I get paid" question, for clarity, comparing this to steemvoter.com for instance (which I haven't signed up for, but might). Charlie seemed to indicate that his was for donating voting power to worthy others, if I understood correctly.