Many people think blind signing is simple, but this is what really matters:
Older signing methods like eth_sign can sign any hash, which could be a transaction. Some wallets have already disabled this method by default.
Blind signing means handing all the verification over to the website making the request. If something is wrong with the website, you won't be able to tell when you approve it.
You should also check the website domain shown in the signing request. If it doesn't match the official domain, reject it.
While you're at it, take a quick look: $ETH is at 2051.38, down 0.63% over 24h.
#ETH
Older signing methods like eth_sign can sign any hash, which could be a transaction. Some wallets have already disabled this method by default.
Blind signing means handing all the verification over to the website making the request. If something is wrong with the website, you won't be able to tell when you approve it.
You should also check the website domain shown in the signing request. If it doesn't match the official domain, reject it.
While you're at it, take a quick look: $ETH is at 2051.38, down 0.63% over 24h.
#ETH