Random Recap Dump [archive]

[Lux (Lux Moreau)]

The truth about signing transactions

Is signing transactions in MetaMask dangerous?

Signing messages is a way of letting the receiver know the wallet is yours, you proof ownership. Most signing functions use personal_sign which is totally harmless. Why? I’ll explain below. The personal_sign code is publicly available, this method called ‘sign and verify’ forces the content you are about to sign to be fully readable (UTF-8 encoded) to any person. Hence why it is popular for login services - like the one running on this board. personal_sign method does not allow transactions to …