#dusk $DUSK
$GPS ready to fly higher n higher it will touch the sky soon but the line that stopped me in @Dusk_Foundation ’s W3sper documentation wasnt about signing.
it was the warning that a transaction builder is not a wallet.
W3sper gives an application lower-level tools for connecting to Rusk, querying state and constructing transactions. But if a client wants to sign without a wallet extension, it has to supply the parts W3sper deliberately doesnt become responsible for.
That includes recoverable key storage and a synchronized treasury behind its "Bookkeeper", including the balance and nonce state needed to build a valid transaction.
A newly generated profile alone isnt enough.
It may contain the identity needed to derive an account, but it has no synchronized "Bookkeeper" entry. Without the current state, the transaction builder cant reliably determine the funds or nonce required for the transfer.
thats the boundary i nearly missed.
Signing proves which key authorized a transaction.
Synchronization tells the signer what it can validly authorize right now.
I like that W3sper exposes the primitives without quietly pretending to solve secure storage and wallet recovery. But a headless application choosing that control also inherits those responsibilities explicitly.
Does separating transaction construction from wallet state make W3sper safer infrastructure, or make custom signers easier to build incorrectly??
#dusk @Dusk
Dusk W3sper’s separation is…
$VELVET dumped again complete disaster
$GPS ready to fly higher n higher it will touch the sky soon but the line that stopped me in @Dusk_Foundation ’s W3sper documentation wasnt about signing.
it was the warning that a transaction builder is not a wallet.
W3sper gives an application lower-level tools for connecting to Rusk, querying state and constructing transactions. But if a client wants to sign without a wallet extension, it has to supply the parts W3sper deliberately doesnt become responsible for.
That includes recoverable key storage and a synchronized treasury behind its "Bookkeeper", including the balance and nonce state needed to build a valid transaction.
A newly generated profile alone isnt enough.
It may contain the identity needed to derive an account, but it has no synchronized "Bookkeeper" entry. Without the current state, the transaction builder cant reliably determine the funds or nonce required for the transfer.
thats the boundary i nearly missed.
Signing proves which key authorized a transaction.
Synchronization tells the signer what it can validly authorize right now.
I like that W3sper exposes the primitives without quietly pretending to solve secure storage and wallet recovery. But a headless application choosing that control also inherits those responsibilities explicitly.
Does separating transaction construction from wallet state make W3sper safer infrastructure, or make custom signers easier to build incorrectly??
#dusk @Dusk
Dusk W3sper’s separation is…
$VELVET dumped again complete disaster
Safer infrastructure
Easier to misuse
Both at once
Builder dependent
2 ساعة (ساعات) مُتبقية
