Proposal- Remove Light Wallets from sidebar and getmonero.org that don't support switching server URLs

Proposal- Remove Light Wallets from sidebar and getmonero.org that don't support switching server URLs
CryptoGrampy
0
0

For anyone unaware, the existing Light Wallets for Monero- Edge Wallet, and MyMonero (among others), store your view keys on a centralized (proprietary black box) server by default. With your view key, these services have a significant glimpse into incoming transaction amounts/tx metadata- and this glimpse continues FOREVER even if you migrate your seed/view key to totally different wallet and stop using the Light Wallet. Additionally, when you're using Light Wallet defaults with these wallets, these centralized services have a glimpse into your spends- notably the time they are occurring.

The above is already well-known information, and it's a person's choice whether or not to use these services. However, the more users use these services with their defaults, the higher the negative effect on the privacy of Monero as a whole. If everyone suddenly switched to using Light Wallets and their defaults tomorrow, it would be disastrous. We should fix that.

My proposal:

Recommended Light Wallets on the Reddit sidebar and getmonero.org site should follow the Light Wallet API spec (https://github.com/monero-project/meta/blob/master/api/lightwallet_rest.md) and allow users to safely specify their own light wallet server URL in a very similar way that any other recommended wallet allows you to safely specify and use your own Monero node URL, otherwise, I believe these wallets should not be listed, or recommended. And, of course, the wallet should function in the same way with a user-provided URL as it does with the default, proprietary server, so long as the user-provided server follows the Light Wallet API spec.

I've created a similar request for the getmonero.org site here: https://github.com/monero-project/monero-site/issues/2162