{"id":"Y6z7lUJSUuA","title":"Wallet Standards Working Group Meeting – January 17, 2023","description":"Today the NEAR Wallet Standards Working Group met for the second time to vote on: https://github.com/near/NEPs/pull/413\n\nMeeting Summary:\nhttp://bit.ly/3kvv9hW\n\nChapters:\n00:22 Agenda\n00:50 Update on Developer Governance\n07:05 Introductions\n11:39 NEP-413 – Author Summary\n14:03 NEP-413 – Benefits\n19:02 NEP-413 – Concerns\n39:11 NEP-413 – Voting\n46:29 Getting Involved \n\nLearn about Developer Governance:\nWebsite: https://neardevgov.org\nTwitter:   / neardevgov  \nTelegram: https://t.me/NEARDevGov\nNEP Process: https://github.com/near/NEPs/blob/mas...\n\nJoin the NEAR Wallet Builder Community Group:\nTelegram: nearbuilders.com/tg-wallet\n\nJoin NEAR's community:\nWebsite: https://near.org/\nReddit:   / nearprotocol  \nDiscord: https://near.chat/\nMedium:   / nearprotocol  \nBlog: https://near.org/blog/\nTwitter:   / nearprotocol  \nGitHub: https://github.com/near  https://github.com/nearprotocol\nDev Docs: https://docs.near.org/\nCreate a wallet: https://wallet.near.org/create\nApps on NEAR: https://awesomenear.com/\nLearn to Build On NEAR: https://www.near.university/\nGrants & Funding: https://near.org/grants/\n#Blockchain #FutureisNEAR #NEAR #nearprotocol\n#nft #dao","channel_name":"NEAR Protocol","published_at":"2023-01-18T00:00:00.000Z","thumbnail_url":"https://img.youtube.com/vi/Y6z7lUJSUuA/hqdefault.jpg","transcript_text":"but hi everybody Welcome to our second wallet standards working group call my name is Ori and I'm a technical program manager from Pagoda and I'm super excited to kick off this group yet again and to discuss another wallet standard proposal today so just to go over the agenda first I will give a quick overview and some updates on developer governance next we'll do some brief introductions as we have a few panelists joining us today then we'll get into the main discussion at 413 and hear from the author Phillip who proposed it and then we will open up the Q a and talk about next steps on how to get involved in developer governance all right so just a quick update on developer governance so over the last few months we've been engaging with the community over this initiative which is really about bringing people and organizations together to help build a decentralized developer ecosystem and empowering anyone to contribute from idea to code and we've been Bucking in most of the developer community activities into four areas so ideation implementation review and support and I just wanted to quickly highlight them to help contextualize our meeting for today foreign so starting with ideation this is about sharing and exploring ideas with other people in the ecosystem so anyone can submit an idea like improve in the protocol or standards and it's important to have a place for people to freely Express and explore themselves and explore ideas in a welcoming and permissionless way and one way to do that is in the developer governance gigs board and this is a new uh platform on your social for anyone to share their ideas to get feedback and support from the community and it's still in the early days but there's already a lot of activity on there and anyone who's interested can start posting their idea today now maybe you have an early seat for an idea or a topic that you want to explore with others so another great way to get involved is to join a community group and community group is a group of very passionate self-organized people who are interested in a specific topic such as zero knowledge wallet standards Etc and they offer a great opportunity for people to come together uh and just discuss ideas and and concerns and things they want to uh help improve and many of these groups have already formed and have dedicated communication challenge like telegram as well as regular meetings and you're welcome to join any of those groups or to start from yourself you can find them on the developer governance website and we're also going to be publishing a blog post probably this week that will highlight some recent learnings and insights from a lot of these groups so what happened if you already have submitted an idea and now you want to turn it into code this is where implementation comes in you can also use the dev gov gigs board to submit implementation solutions to your ideas or even if you have an alternative solution in mind for somebody else's idea you can propose that as well and this is just a great way to gauge Community interest and supports and to get a variety of perspectives which really can help strengthen our Collective problem solving and innovation now if you have an idea that you want to get integrated across the ecosystem like a new contract standards or protocol Improvement or if you are seeking funding support you will need to get a more official validation from a recognized group of experts and you can do that by submitting an app a near enhancement proposal and this is a rigorous process that is similar to other prominent open source projects like rust and it enables anyone to submit their proposals for review and you know this is actually what we're talking about today on call as and if those submitted so what happens once you submit a nip and how does it move forward foreign so this is where the review comes in which involves working groups like the wallet standards working group that we have here today and basically a working group is a selected Committee of subject matter experts that help review proposals in a fairly and timely manner and oversee decisions and there are multiple working groups each one focusing on a different ecosystem need we've already kicked off four of them to help bootstrap this process and we've been iterated on it for the last few months to kind of understand what works and what doesn't and we hope to introduce more groups in the future and Empower more people in the community to to run them so before we get into the actual call today I just wanted to highlight the roles that are involved in the next process as well as the the stages so uh on the rolls front we have the author this is the person who writes the proposal and presents it to the working group there can also be a champion who takes that over in case the original author is unable to uh continue there's the moderator the person who facilitates the process and helps validate that the proposal meets the guidelines and progresses forward there's the reviewer the subject matter expert the person who reviews the technical feasibility of the proposal and then the approver this is the working group member uh who helped make the final decision and in terms of the actual illustration of this process there are three stages draft review and voting and two outcomes approved and rejected and all of those roles help move the next through these stages and towards the outcomes and most of this happens asynchronously on on GitHub on the nip itself but when we do get to the voting stage each working group has a public meeting like the one we're having today to discuss the net with the author and to formalize the decision and this is what I meant to show when I was talking about that we're here to to vote and have make a decision right so uh uh lastly I just wanted to highlight what happens when an app actually gets approved uh and how can the implementer seek funding and that leads us to the last area which is support So once the working group completes their technical due diligence and approves their proposal they can use the developer governance give gigs board to post an official attestation and this tells any potential sponsors that there was a formal review done by recognized experts in the ecosystem and that any organizations or individuals can choose to sponsor that project so that was a very quick uh overview of the latest parts to developer governance and as I mentioned there there are more blog posts come in that will help kind of go into further detail and you can already check uh one that explains it on the developer governance website and with that I am super excited to jump into the wallet standards call today and I'd like to do some introductions uh and start with the working group members and I'll hand it over first to camera and Dennis hey everybody how's it going uh Cameron Dennis here I am the uh CEO of the Banyan Collective it's a ecosystem management organization dedicating to scaling near in the United States but simultaneously I am uh still working at near Foundation where I've been working here for the last uh two years primarily on filling a lot of the core infrastructure gaps in the ecosystem uh whether that be on-ramps custodians uh oracles indexers whatever people need to actually build on here uh I was working on mainly on bringing new partners in and now I'm more focused on the social layer so azori has eloquently described uh making sure that there are clear paths for devs to uh get engaged so now it's about meetups and hackathons and standards and dinners and Builder days and everything in between so uh super excited to be here and personally very passionate about Management's zero knowledge uh Dows and I like D5 a lot too so a little bit of everywhere but um yeah very very interested in Key Management and onboarding billions people went through there you want to go next absolutely uh so I'm Daryl Collins I work over at Pagoda as well I was responsible for the near wallet code base for a while after being hired um and I'm currently working on the onboarding team we're trying to solve the issue of onboarding people with zero friction or as close to zero friction as possible uh I love JavaScript everything JavaScript I'm kind of one of those one of those strange people who actually enjoys the pointy education language so I'm involved in everything JavaScript across the ecosystem here if you go to as well hi guys Osman from Pagoda as well uh currently working on tools at Pagoda before this I was working on your api.js and before that I was working on the wallet so yeah like a lot of clients a lot of Standards a lot of uh like uh apis and stuff like that that deal with linear protocol so nice to meet you guys awesome thank you all for for being here and for all the the work that went into uh reviewing the the nap and and helping kind of iterate on this process all right so next I would like to introduce the moderators that are here which is Vlad and myself so Vlad hello hey everybody yeah plus here you also can see my handle a lot under for all nickname on GitHub and on sticker flow I'm I joined near quite early on one of the first engineers at the team and since the time I've been involved in all the engineering tasks and lately I got involved with the the small formal and scaling infrastructure like ecosystem task which is the Delaware Gardens and nap specifically so doing all this work to help us going and scale as much as possible and Ori awesome back to me uh yeah so I am playing a moderator role in this process and yeah been super excited to just start seeing momentum you know of the working groups and the nests and the community groups and there's more to come so I'm looking forward to it all right so now I would love to introduce the author for the nip that we are discussing today which is Nip 413 so hello Phillip would you like to introduce yourself sure hey everyone um I'm Philip I've been at near for I think going to a year and two months now um started working originally on the wallet code base um did some work on the JS SDK launch and currently working with the 2nd so um yeah security awesome yeah thank you so much for submitting the net and excited to get to it and I also wanted to just highlight that if at any moments during the proceeding discussion uh if you have questions or feedback feel free to drop them in the Q a button on the screen you can also add your comments in the chat box just make sure to select everyone because sometimes it defaults to just the panelists and uh you can also raise your hand if you want to speak with that I am super excited to get into the next discussion and we first will have the author uh Philip kind of present a summary of the nap and then from there we'll have the working group kind of uh discuss uh their findings and ultimately we'll get to the actual decision so with that uh Philip would you like to tell us a little bit more about uh your neck why you believe it's important Etc sure um so the this nip is basically proposed in like a standard for sign in messages um using a new account for a specific receiver so the this actually came up from like a request to enable like a means of authentication for accounts where that is not like results in in carrying any gas Visa having to be on chin so this um and you be basically purposes that we add like a sign message interface to the wallet API that would allow daps sign specific messages um for their like contacts um yeah there are a lot of things should I would I need to run through like some of the things in the actual document or is that something we're going to run yeah so Daryl give us a summary of some of the uh benefits and concerns story rates so um if there's anything else at a high level that you want to highlight feel free to but otherwise we can proceed once you feel like you're good yeah I think at a high level that's that's exactly what it does um and so like in doing it we had to like make sure to factor in like all the security risks that could be introduced by like um making sure like people there's no malicious um there's no opportunity for malicious actors to perhaps make people sign things that look like um just a message what are valid transactions um also reduce the possibility of a replay attack where um people um the apps could potentially delay um the signing of the message and potentially use that to stop like do things on people's accounts subsequently or perhaps submit this for for the activity on the account subsequently to the blockchain so yeah I mean there will dive into more detail but at a summary that's some of the things we talk about when coming up with this awesome cool thank you so much for that summary and again for our first submitting the snap next I'd love to uh get into the actual uh overview from uh from Daryl on the benefits and the concerns that we saw and just for context for anyone who might be new to this call and this format uh that everyone has spent time like including the community going through the nap discussing it on GitHub and so what we're doing here is we're summarizing all of that activity that's that has happened asynchronously um and you can definitely follow along as well on the net itself which is linked to the invite so with that Daryl hello good stuff um so benefits for this one are pretty uh pretty huge actually from the ecosystem perspective um one of the biggest things that people have had a had a issue with on our current signing in process for logging into a d app is the fact that there's always a side effect there's an on-chain side effect to logging in and one of the biggest benefits that we get from this approach is that there is no on-chain transaction executed so you can authenticate somebody without adding an access key to their account and this means that you don't have to pay for storage for an access key um this is a huge benefit for folks who have very little near in their account and they're not looking to lock up additional near uh holding an access key and in some cases actually the apps have been written that don't actually need a limited access key a really obvious case for this is some defy apps every time you need to do something you actually need to sign it with a full access key to transfer some wealth around right you have some value and having somebody add a limited access key for a smart contract that you can't even call without uh having a full access key is just confusing to the user uh people have a it's kind of a dark pattern on the user side of things because you end up with uh an approval for a sign in where it tells people that they can call a method on a smart contract that might not even exist and it means that there is an overhead on signing in that requires that somebody has near available on their accounts that is burned in gas and also some amount that is then staked onto this chain uh to store this limited access key and if the user then deletes the limited access key later uh you know it's confusing to the user as to whether or not that will impact their usage of the app if I remove that limited access key will I no longer be able to use that defy app well actually no you'll be you'll be fine because every transaction goes through a full access key anyway so it eliminates a lot of dark patterns in the onboarding experience for somebody people signing in and it makes it so that there won't be unnecessary gas burned on chain in order to authenticate that somebody owns a given your account and it also is kind of convenient that it it would apply for an implicit ID that you may not actually have even created on chain uh this can be used to to verify that you own any full access key for an account regardless as to whether or not it exists uh this is also a really nice thing because it allows us to implement uh authentication using JWT or a web authen type of uh challenge uh signing response so you don't actually have to use a transaction like an oracle that is the chain in order to verify something you get a signed message you verify that it's signed with the key that that it says that it was and you can treat that as an authenticated login for an app that actually doesn't use the chain yet it's very useful for a progressive onboarding where somebody may actually have access to an app as an identity but until they actually deposit some near and want to interact with it in a privileged way they don't need to worry about what that means for an on-chain account uh depositing funds Etc and it also removes any kind of uh block delays now this is kind of a funny one because you know block times on your are incredibly low uh transaction execution does not take a long time but it does mean that signing in doesn't involve uh waiting for finality on a on a transaction on the Chain uh it makes error handling simpler you don't have to worry about oh this transaction failed for some reason let's say you couldn't access our PC this doesn't require RPC actually so there is no dependency on external uh Network requests there doesn't have to be a a access key added to the account so it eliminates a little bit of a delay there and simplifies the the mental model for any Engineers who are building on this stuff if you're building a forum let's say that you want to authenticate people that they own in your account but they don't necessarily submit transactions against that in your account you just want to use near for identity this is a really nice benefit to having this kind of assigning functionality where you can verify that somebody owns the account without having to wait for a transaction and write the code that pulls hey that transaction succeed or fail what was the results of it uh that kind of thing so those are the high level benefits uh and on the drawback side of things uh we have a totally a separate slide here that goes through the drawbacks or the concerns I should say are blockers most of these have been resolved so we've had really Lively discussion on the pull request I have to thank everybody who's been involved in the discussions this has actually been quite a quite a journey from its original concept the original concept was very tightly scoped to a verifying ownership on the account and this is a much more generic approach that I think people will find more useful and the the major things that that were concerns were that there will be a possibility where there could be a division in support if a certain wallet does not implement this new part of the standard then this could penalize a wallet that uh otherwise would have users logging in to a d app if the d-app only allows logging in Via this new method then there will be a split which login which wallet can I I log in with to this to this particular D app well you can only log in to that D app with a wallet that supports the new uh extension to The Standard um this is definitely a concern uh our our recommendation is that the apps should have a a happy fallback where if somebody wants to choose to use a wallet that actually adds a full access key or a limited access key then that could be an alternative way to sign in there's no requirement that this is the only way to sign in but the user of course is going to see that extra friction they're probably going to put pressure on their wallet Implement her to go hey why don't you support this functionality uh and it should motivate motivate those wallets to implement the easier lower friction way of signing in the uh the idea that uh wallets are obliged to implement the the standards is also one that we that we talked about so in in order to be listed in wallet selector there's some requirements uh around uh Security reviews and implementation of basic apis that the wallet selector has to use and at some point here this new functionality this new API call can be required uh to implement or to support a wallet in wallet selector that would add a an extra API call that is the base standard API that wallets need to implement into their support for wallet selector in order to be listed in the the list of wallets that you can log into using wallet selector so this can uh provide a little bit of a nudge towards the the wallets to say if you want to be listed in wallet selector the whole point of wallet selector being an easy way of providing a compatibility layer for all the wallets in the ecosystem to be able to work in a consistent way then you need to implement this API in addition to the ones that you had implemented in the past and the the second major concern was well by removing the sign in creating an on-chain key where reducing the number of transactions that happen on chain so right now every time somebody signs into a DX there's a transaction submitted on chain that has an access key to their account to prove that they own that account and if everybody started using sign message then there would be less transactions on chain and this is a true this is true however we're we're not trying to index towards usage of the chain on authentication you know as it requires as a benefit towards the the chain or as a driver for train on chain usage on-chain usage should be driven by organic usage that's necessary things that actually make a difference transactions that are valid that add some kind of value to the user that need an interaction with the blockchain and there's there was some discussion about this but the general uh consensus was that this is a a good way to be moving there is there is a reduction in transactions but also it's also worth considering that most d-apps or many D apps still will need a limited access key to give you a smooth interaction with their smart contract with background transactions that you pay gas for without having to constantly be interacting with the wallet uh this is a different way of authenticating that will likely apply to a subset of apps anyway if you need to be able to submit transactions with a limited access key then you'll continue to use the other API and the user will still get a limited access key and it'll make sense to them why they're getting one because they're using a d-app that uses transactions on chain so this will simply simplify the mental model for users as well uh third one was one that I had actually brought up in uh my final review of the NEP which is currently signing a transaction as a receiver ID that's used a receiver of the transaction the Target that the transaction executes against and receiver is a key on this payload that is being provided to the wallet to be signed as a message so there's some uh similarity in terminology but a difference in logical meaning between these things because receiver in this NEP is really it's the requester or the origin of the request there's not a smart contract online that receives this there is no transaction so having the name of a receiver if somebody is looking through a near documentation they may pull up the signed transaction documentation and right next to it the sign message from documentation and it could be easy for them to conflate the two or get confused about the difference between the two well how is time message receiver not like signed transaction receiver isn't it an account isn't it a transaction uh it adds if you're doing Search terms searches you know indexing via Google or something or looking for um posts on stack overflow low you're going to get interleaved data depending on which trial which kind of an API call you're looking at and my suggestion here was can we just change the name of receiver instead of having receiver let's call it something that is more specific to this API which is my suggestion was requester or actually if we want to be uh even more generic earlier I was talking about the implementation of web often or JWT we could use origin which is what web authent uses uh as its challenge it uses typically origin is the domain that the request is coming from and we will probably have a similar kind of a pattern in this usage of this feature where oftentimes the receiver would have been the domain that it came from if you own a d app on that has its own domain or it might be a string that somebody comes up with on themselves you know my app my awesome app you know whatever that might be so that was my suggestion was that we just made a slight tweak to the API so that we don't have this similar but different kind of a argument and as a result we separate out the documentation concerns and the mental model is easier for people to understand this is signing a message somebody requests that you sign the message that comes from somebody it's not a target of a transaction that you're signing uh that's currently unresolved and that I didn't see uh some feedback on the final review for me this is not a blocker this is not something that I would vote against the NEP if we don't change it but it feels like a really low friction change something that's trivial for us to modify since nobody has implemented the spec and I think it would be helpful just from a a a conceptual standpoint for those who are understanding how this works um the other one was uh brought up I believe actually by Osman and that is the NEP should emphasize that nonce and receivers should be displayed to the user in signing requests by wallets so if a wallet receives an IPI call for this sign message Api on the screen that the wallet displays we want the wallets to be encouraged strongly to show the user relevant information that lets them understand what they're signing and why they're signing it and by including the nonce and the receiver both in that information we show the user context that they can use to understand do I want to sign this message is this a safe message to sign uh and who who is the person who's requesting this message nonce is very important from a security standpoint to avoid replay attacks you want the nons to be unique each time there's a signing request and it is possible that somebody could implement a d-app that uses this API in an insecure manner they could use nonsense that are not unique and if they did that then we could run into a situation where security of this functionality is compromised you don't want to be signing multiple requests with the same nonce uh this is a a bad idea cryptographically you want nonsense to be unique the whole point of nons is number only used once you want that to be one and only one usage if you have people signing messages that have the same Noms over and over things get really freaky from a security standpoint you can end up compromising your actual full access key um the underlying key that you're using to sign them so it could be helpful to show nonsense just so that the user could say I've already signed a message with this month I don't want to cite another message with this nonce it would be up to the user to keep track of these things which this is the kind of um uh discussion about like well is this is this noise to the user is this helpful to the user the user would have to be paying attention to this and they would have to know that they'd sign things repeatedly with the same nonce um however that was the the reason for this concern was it can compromise the security of the of the signing if you sign a bunch of messages with the same nonce over and over um and the last thing was uh not really uh a concern or a blocker actually it's the fact that we should extend our injected wallet API to document this new method right the injected wallet API is what most people are using in the wallet ecosystem currently to implement extensions and in fact some people have used the injected wallet API with like a bridge to implement against uh wallet API wallets that are web wallets so we should we should update the injected wallet API once this has been approved to describe how the signed message should be implemented in injected wallets and that's true we absolutely should but it's also out of scope for the approval of the underlying NEP that we're talking about which is this API should sign message exist as a defined uh interface that people can implement so that was uh resolved so at a high level I think um the main things would be at this point discussion around um voting there's I've noticed there's been some mentions in the chat uh from folks that are saying let me just bring to attention the comments from the chat so for example listeners uh that we are on the same page so jalarma commented that uh the following I do agree with changing the receiver for another name but I do not like the requester or region since they talk from the respect perspective of the person receiving the message I would instead propose recipient I'm sending it to someone which is perpendicular to somebody asked it to me it from me uh what do you think uh is there a do you think it's worse to discuss um this like naming um during the call or maybe we take it offline uh uh what do you think they're all Osmond Cameron so personally I don't have a strong opinion around around the exact wording my main my main goal is to not have the exact same wording as the signed transaction I'm totally fine with recipient as a as an idea instead uh origin was mainly as uh a benefit in my mind and that it overlaps with web often so since this pattern is basically the same as a web authent authentication uh it seemed like it might help people kind of build a mental model of how this works in a familiar way if they've implemented web often before but I don't have a I think recipient could work just fine on on my side I don't have an objection there um I think um like receiver and requests are sort of pretend or or hint that it's in their account ID where um like I don't think it's necessarily A near account ID in this case right so like I like origin a bit um more and I think receiver also implies that like we're sending a transaction as well like like Daryl pointed out um so so those were those could be the things that we think about will come up with the naming here like um that this doesn't need to be in your account ID it could be like a website it could be anything and then the second thing is like um we're not sending a transaction here right so like you wouldn't complete that with other uh send transaction methods sorry about the background I'm completely out of scope here but maybe a referral is uh something that we can reuse from the web world of web to world is that the term we are looking for I think referrer would might confuse people as well uh because they usually refer as a domain uh you know people think about that on the request side of things on the browser uh apis and in this case it's it's going to be an arbitrary string we're not requiring that it is a domain it could it could be you know by the name of my D app actually um that's one of the reasons why I'm kind of hesitant to use origin as well because origin in web in web authen really is the domain that things are coming from it's almost I think it's actually even articulated in some of the specs that it should be the uh the domain and that's not always going to be the case for D apps you know if you have multiple D apps in the same domain then they should actually have different origins or different uh requesters so it's this is a kind of a tricky thing my my I don't have a strong opinion about where we go other than I think we shouldn't have it be the same thing as signed transaction um okay well do we want to uh continue discussing this part or maybe table in it to the end uh do you think this is like blocking us from moving forward with a decision or at this point uh that's not a blocker for me I do like what Guillermo is saying about the word recipient um it does I think help clarify a lot of things but I don't think this is I think this could be formalized uh office call and shouldn't necessarily be blocking the decision okay um maybe um Guillermo if you're up for it maybe we can come back to it just to make sure we get through the the rest of the call but like I'd love to uh yeah if we have time we can maybe take you know uh have a five minute sidebar at the end uh or we can continue it uh yeah on the nip itself that's a great idea as well so I feel like we could do a uh just a final vote on the NEP itself for the people who've been contributing and get a get a you know ABC here are three options and see see which one wins great thank you awesome and then uh was there another comment Vlog that you wanted that that you thought was relevant uh I saw Paul it was who was I think I saw on I'm scrolling back I I think it was Paul um who commented the following uh I think nonce will not be easy comprehensible from the general user perspective is it just a bunch of random bytes kind of hard to keep track of the human reading the interface and I tend to agree and I think well they're all you what what you just brought here is that like we assume uh humans like users would need to be in charge of checking that they are not signing the same nons again we probably can have a like a cached uh list of used nonses uh with exploration in local storage and that would be it's um so David actually brought a good point on the pr um when we were talking about this and um the nonce the purpose of the nonce is actually to for the caller so so that the caller um so that the the the the wallet or the user doesn't actually resend a signed message that the caller requested earlier so that's I think that was the main idea behind it but this is a secondary idea as well where uh the user doesn't send doesn't sign a multiple of the same nonsense so uh but the main purpose of the nonce is actually so that the caller um doesn't receive a sign an already signed message that's um that's signed with a different notes or or delayed or like let's say the caller asks for a signature and then um the user um like keeps that signed message and then resends it if there was no Nots then like the koala wouldn't be able to tell the difference between the two signed messages so that was the replay attack that um the NEP author had in mind I think yeah that's definitely true so there's two different concerns one is replay attacks and then the other one is the security of signing many things with the with the exact same nonce and the same key being a security uh concern um I I actually really like that idea of Vlad that the wallet itself could be encouraged to keep track of nonsense that are signed with a particular key because the wallet knows the key that's being used to sign the transaction or sorry the message in this case and the wallet could actually ball at signing the same uh multiple messages with the same nonce I actually would be a big fan of just adding that as um some wording to the NEP that says we encourage the question then becomes is it a requirement for implementation or is it a strongly encourage uh Implement that be implemented for the wallet yeah I think I think it would have to be strongly encouraged at least it's like um it's like it would have to it would have to keep track of the same nonsense for a receiver right so it's like if if it gets the same non-sport this particular um requester um then then it rejects but then if it gets the same knowledge but for another requester then it's fine yep I think we should add that to the wording I think that would be awesome uh you know the wallet should we should reject multiple messages for the same recipient that have the same logs uh how much they're able to persist I mean this is obviously a scalability thing can you keep a log of absolutely every single one and there's concerns around well what if you're on two different machines uh but you know best effort on the on the wallet side all of those are implementation details perfect um who is going to take that action is it going to be fill up as the author you're going to go and incorporate that awesome thank you and then yeah just for we definitely will post this call as well but I guess um you know whoever has spoken today I think Paul Guillermo feel free to also add your comments on the nap just again we want to make this create visibility you know we know that there are a lot of time zones so not everyone can attend the call so we just want to make it really fair and transparent so but really appreciate all of the input and and the summary Daryl that you gave on the concerns and I think now that we've heard uh all of those I'd love to now hand it over to each uh working group member to present their opinion how you're leaning uh which that which brings us to the voting stage of the call so who would like to go first I go so yeah cltr uh I support this as a user of a lot of newer apps uh I'm always looking for better ways to streamline The Experience um I also think that this is going to be you know really helpful for a lot of dap developers to uh help with uh connecting with I guess yeah extremely experience with other wallets removing the delay for users uh Progressive onboarding we talk a lot about in our wallet Builder groups um an exciting easier overall like this is almost a no-brainer uh for me so it's a yes for me and yeah I don't know if you have any other questions uh about my thoughts feel free to just at me in the GitHub repo yeah I could pass it on to awesome okay um so yeah for me I vote Yes as well I think it's like this is a different function from like access key Edition and the fact that access key Edition has been is being used for this um like it's because we don't have standards for it yet so this is the right way to approach it and it's a completely different functionality and it's I think been widely requested and so yeah definitely yes good stuff well I'm also inclined to vote Yes for this I think it's a huge Improvement uh as far as capabilities for the apps that don't require limited access keys and I think it'll eliminate some dark patterns on the intro all right awesome so I am hearing a unanimous uh consensus it seems like and uh with that seems like this uh NEP is officially approved by the working group members yes and I just saw Shop's message is this another pass another net three in less than a week yes I can't believe it either you know when I first joined uh several months ago you know there were some nips that were just kind of hanging out for several months and it took a lot of time and effort to even just get one pass so this is definitely um you know representative of every single action that that everyone on this call including the attendees uh have taken just to kind of help align so thank you super exciting and thank you Philip again but before we go to thank you the next steps yeah actually let's talk about next steps so uh uh Daryl or Vlad can one of you stick to this or anyone else absolutely so all the wallets you're going to need to implement against this uh API and this actually dovetails very well with our earlier concern of the injected wallet standards should have this added to it so that people know what to end to actually Implement against so as soon as this has been approved and merged we're going to want to have a follow-up that adds this to the injected wallet standard I don't think that needs to go through a major uh review process because it's an implementation of this NEP which we've already reviewed and approved so that can be I I'm happy to follow up on the injected wallet and just get that PR created that actually has a proof of concept of this so people know what to implement and once that's been merged then uh it needs to be broadcasted into wallet teams so all of the people that are in the wallet Builders groups in telegram that would be the obvious uh audience for this people who are building wallets need to be made aware that we have updated the injected wallet standard and that they should implement this stuff into the injected wallet standard uh that they've uh that they've conformed with on their existing wallet implementations that's something that uh maybe I'm not sure who would be the best person to to socialize that there maybe Cameron yep we actually have a call in 15 minutes with a bunch of wall Builders so we can get that moving ASAP good stuff so once we've told them about that then the wallet teams themselves are going to go through and just add support for the sign message which will be a little UI that responds to this new API call that shows the user that they're signing a message it can explain to the user that they're not executing on chain transaction maybe give them a little bit of information about why they're signing a message it's verifying that they own the account and they will Implement that and release it into production and as they do that they will then update their corresponding wallet implementation in the wallet selector package so wallet selector is the central place where everybody implements or ties their wallet implementations to the actual client that the app developers use so once the wallet team is updated their wallet to support this API they will open a pull request against the wallet selector repository that updates the the ads to their Plugin or their module the support for this uh this method the sign message method awesome cool yeah and uh one new thing that we've been adding to naps is also yeah summarizing the benefits and concern section in the nap itself so Philip I can reach out to you to see if you want to partner on that uh and I can share with you an example from another nap but yeah are there any other comments just the next steps okay cool so I just wanted to open it up to q a um does anyone have any questions or feedback just on the overall process and the call definitely would love to hear while we're waiting for other comments I just want to communicate back the chat um message it there so there was a background conversation uh continuing on the receiver naming and my proposal was that we could have actually two terms one for devs which we would call a region and another for regular users on the wallet interface and we can easily also communicate it with the within the map and that would probably solve it again our problem right now but uh that's just the proposal I think we'll uh have it over the GitHub discussion anyway um so feel free to chip in awesome so we did get just a comment from Guillermo so happy to see the snap moving forward the new wallet is about to get even more awesome and yeah that's super super great so uh cool with that I'd love to just quickly talk about ways that all of you anyone on this call can get involved further so um if you uh have an idea that you want to get integrated um if you just have a general idea that you want to collaborate with others around you can use the dev gigs board as I discussed to post that there you can also add solution implementation proposals Etc if you have an idea that you want to get integrated across the ecosystem that's where you also need to submit a nap or also if you want to seek funding and then if you want to see all of the existing naps discussions that are going on you can check out the kanban board on GitHub that shows all of the the nips by each working group so you can filter it down to the wallet standards group and see all those depths and then of course there are there are Community groups so there's the near wallet Builder group that actually Cameron and Sean have been leading and it's been just getting a lot of activity and uh momentum I don't know if Cameron or truck you want to say anything give applaud uh absolutely so uh if you just go to nearhawks.com builders you can check out all of the Builder groups that the Banyan team helps run uh well actually there's many of them on that list that we don't uh potentially run but the whole point here is if you're a founder or Builder focused on a certain vertical and you want to connect with other builders interested in that same article there is a weekly call for you to join there's an online community for you to like you know collaborate with and we unpack a lot of future standards here and get the feedback from the community on what they think about the standards before you would start drafting this as an NEP so um yeah joined it's totally accessible to all Builders now we did want to rename it wallet Builder Group after we named it originally wallet community group because we just had a bunch of people join that just say hey I'm part of the community uh these groups to be clear are for Builders and so if you're interested in uh building wallets and collaborating with other wallet Builders join that one we also run nft one Dao D5 and that's pretty much it and so there's a bunch of other ones that you can join so next call is 10 minutes from now so uh we're shot by the way huge shout out to shot for putting all this a lot of this together uh wallet builders near builders.com too is a good place to go go so thank you Rory for giving me time there amazing yeah no this is great cool well uh so just uh if you want to learn more about developer governance please bookmark our website follow us on Twitter Telegram and yeah also there's a remind I wanted to give a reminder for the first tools working group which has happened in this Thursday we're actually going to be doing it in a slightly different time zone that's more accessible to our uh community in in Asia and parts of Europe so um if you happen to be available during that time would love to see you there uh and with that I would like to close by giving a humongous shout out to Philip for taking the time to write this nap and bring It Forward yes uh Daryl is is doing the hearts uh uh emoji with the hands uh which we all are we're very grateful um uh for for that and then the working group members Cameron Daryl Osman you took the time to also think through the snap and add your perspective which were appreciate the subject matter experts Peter Paul who spent a great amount of effort as well thinking through the benefits and the concerns which helped Daryl and the working group members also think further through this snip and then the community that was involved this Cameron already gave a shout out to Sean and I wanted to Echo that as well uh he's being very active especially like the wallet um the community groups and Beyond so super grateful and yeah with that I want to wish everybody a good week and give you some time back in case you want to prepare for that next call so thank you again and take care I think we from the comments we also want to give shout outs to guilmer who worked a lot and that it contributed to the snap so yeah one thanks for uh for the community to also recognize uh each other and definitely it's worth to uh get everybody to the same page and thanks to all this effort we we can move forward some kudos to everybody thanks yes cheers take care","transcript_synced_at":"2026-11-04T03:54:14.893Z","segments":[{"start_seconds":3,"text":"but hi everybody Welcome to our second wallet standards working group call my","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3s"},{"start_seconds":11,"text":"name is Ori and I'm a technical program manager from Pagoda and I'm super excited to kick off this group yet again and to discuss another wallet standard","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=11s"},{"start_seconds":19,"text":"proposal today so just to go over the agenda first I will give a quick overview and some","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=19s"},{"start_seconds":26,"text":"updates on developer governance next we'll do some brief introductions as we have a few panelists joining us today then we'll get into the main discussion","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=26s"},{"start_seconds":35,"text":"at 413 and hear from the author Phillip who proposed it and then we will open up","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=35s"},{"start_seconds":43,"text":"the Q a and talk about next steps on how to get involved in developer governance","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=43s"},{"start_seconds":49,"text":"all right so just a quick update on developer governance so over the last","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=49s"},{"start_seconds":56,"text":"few months we've been engaging with the community over this initiative which is really about bringing people and organizations together to help build a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=56s"},{"start_seconds":65,"text":"decentralized developer ecosystem and empowering anyone to contribute from idea to code and we've been Bucking in","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=65s"},{"start_seconds":73,"text":"most of the developer community activities into four areas so ideation implementation review and support and I","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=73s"},{"start_seconds":80,"text":"just wanted to quickly highlight them to help contextualize our meeting for today foreign so starting with ideation this is about","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=80s"},{"start_seconds":89,"text":"sharing and exploring ideas with other people in the ecosystem so anyone can submit an idea like improve in the protocol or standards and it's important","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=89s"},{"start_seconds":98,"text":"to have a place for people to freely Express and explore themselves and explore ideas in a welcoming and permissionless way and one way to do","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=98s"},{"start_seconds":107,"text":"that is in the developer governance gigs board and this is a new uh platform on your social for anyone to share their ideas","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=107s"},{"start_seconds":115,"text":"to get feedback and support from the community and it's still in the early days but there's already a lot of activity on there and anyone who's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=115s"},{"start_seconds":122,"text":"interested can start posting their idea today now maybe you have an early seat for an idea or a topic that you want to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=122s"},{"start_seconds":130,"text":"explore with others so another great way to get involved is to join a community group","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=130s"},{"start_seconds":137,"text":"and community group is a group of very passionate self-organized people who are interested in a specific topic such as","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=137s"},{"start_seconds":144,"text":"zero knowledge wallet standards Etc and they offer a great opportunity for people to come together uh and just discuss ideas and and concerns and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=144s"},{"start_seconds":153,"text":"things they want to uh help improve and many of these groups have already formed and have dedicated communication","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=153s"},{"start_seconds":161,"text":"challenge like telegram as well as regular meetings and you're welcome to join any of those groups or to start from yourself you can find them on the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=161s"},{"start_seconds":169,"text":"developer governance website and we're also going to be publishing a blog post probably this week that will highlight some recent learnings and insights from","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=169s"},{"start_seconds":178,"text":"a lot of these groups so what happened if you already have submitted an idea and now you want to turn it into code","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=178s"},{"start_seconds":187,"text":"this is where implementation comes in you can also use the dev gov gigs board to submit implementation solutions to your ideas or even if you have an","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=187s"},{"start_seconds":195,"text":"alternative solution in mind for somebody else's idea you can propose that as well and this is just a great way to gauge Community interest and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=195s"},{"start_seconds":203,"text":"supports and to get a variety of perspectives which really can help strengthen our Collective problem solving and innovation","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=203s"},{"start_seconds":211,"text":"now if you have an idea that you want to get integrated across the ecosystem like a new contract standards or protocol","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=211s"},{"start_seconds":217,"text":"Improvement or if you are seeking funding support you will need to get a more official validation from a recognized group of experts and you can","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=217s"},{"start_seconds":226,"text":"do that by submitting an app a near enhancement proposal and this is a rigorous process that is similar to other prominent open source","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=226s"},{"start_seconds":235,"text":"projects like rust and it enables anyone to submit their proposals for review and you know this is actually what we're","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=235s"},{"start_seconds":242,"text":"talking about today on call as and if those submitted so what happens once you submit a nip and how does it move forward","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=242s"},{"start_seconds":250,"text":"foreign so this is where the review comes in which involves working groups like the wallet standards working group that we","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=250s"},{"start_seconds":257,"text":"have here today and basically a working group is a selected Committee of subject matter experts that help review","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=257s"},{"start_seconds":264,"text":"proposals in a fairly and timely manner and oversee decisions and there are multiple working groups each one","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=264s"},{"start_seconds":272,"text":"focusing on a different ecosystem need we've already kicked off four of them to help bootstrap this process and we've been iterated on it for the last few","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=272s"},{"start_seconds":280,"text":"months to kind of understand what works and what doesn't and we hope to introduce more groups in the future and Empower more people in the community to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=280s"},{"start_seconds":288,"text":"to run them so before we get into the actual call today I just wanted to highlight the roles that are involved in the next","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=288s"},{"start_seconds":296,"text":"process as well as the the stages so uh on the rolls front we have the author this is the person who writes the proposal and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=296s"},{"start_seconds":304,"text":"presents it to the working group there can also be a champion who takes that over in case the original author is unable to uh continue there's the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=304s"},{"start_seconds":312,"text":"moderator the person who facilitates the process and helps validate that the proposal meets the guidelines and progresses forward there's the reviewer","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=312s"},{"start_seconds":320,"text":"the subject matter expert the person who reviews the technical feasibility of the proposal and then the approver this is the working group member uh who helped","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=320s"},{"start_seconds":328,"text":"make the final decision and in terms of the actual illustration of this process there are three stages draft review and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=328s"},{"start_seconds":337,"text":"voting and two outcomes approved and rejected and all of those roles help move the next through these stages and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=337s"},{"start_seconds":344,"text":"towards the outcomes and most of this happens asynchronously on on GitHub on the nip itself but when we do get to the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=344s"},{"start_seconds":351,"text":"voting stage each working group has a public meeting like the one we're having today to discuss the net with the author and to formalize the decision","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=351s"},{"start_seconds":360,"text":"and this is what I meant to show when I was talking about that we're here to to vote and have make a decision right so uh uh lastly I just wanted to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=360s"},{"start_seconds":369,"text":"highlight what happens when an app actually gets approved uh and how can the implementer seek funding and that leads us to the last area which is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=369s"},{"start_seconds":378,"text":"support So once the working group completes their technical due diligence and approves their proposal they can use","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=378s"},{"start_seconds":386,"text":"the developer governance give gigs board to post an official attestation and this tells any potential sponsors that there","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=386s"},{"start_seconds":393,"text":"was a formal review done by recognized experts in the ecosystem and that any organizations or individuals can choose","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=393s"},{"start_seconds":400,"text":"to sponsor that project so that was a very quick uh overview of the latest parts to developer governance","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=400s"},{"start_seconds":408,"text":"and as I mentioned there there are more blog posts come in that will help kind of go into further detail and you can already check uh one that explains it on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=408s"},{"start_seconds":418,"text":"the developer governance website and with that I am super excited to jump into the wallet standards call today and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=418s"},{"start_seconds":424,"text":"I'd like to do some introductions uh and start with the working group members and I'll hand it over first to camera and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=424s"},{"start_seconds":432,"text":"Dennis hey everybody how's it going uh Cameron Dennis here I am the uh CEO of the Banyan Collective it's a ecosystem","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=432s"},{"start_seconds":439,"text":"management organization dedicating to scaling near in the United States but simultaneously I am uh still working at near Foundation where I've been working","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=439s"},{"start_seconds":448,"text":"here for the last uh two years primarily on filling a lot of the core infrastructure gaps in the ecosystem uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=448s"},{"start_seconds":455,"text":"whether that be on-ramps custodians uh oracles indexers whatever people need to actually build on here uh I was working","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=455s"},{"start_seconds":463,"text":"on mainly on bringing new partners in and now I'm more focused on the social layer so azori has eloquently described uh making sure that there are clear","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=463s"},{"start_seconds":472,"text":"paths for devs to uh get engaged so now it's about meetups and hackathons and standards and dinners and Builder days","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=472s"},{"start_seconds":480,"text":"and everything in between so uh super excited to be here and personally very passionate about","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=480s"},{"start_seconds":487,"text":"Management's zero knowledge uh Dows and I like D5 a lot too so a little bit of everywhere but um yeah very very","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=487s"},{"start_seconds":495,"text":"interested in Key Management and onboarding billions people went through there you want to go next","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=495s"},{"start_seconds":502,"text":"absolutely uh so I'm Daryl Collins I work over at Pagoda as well I was responsible for the near wallet code","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=502s"},{"start_seconds":509,"text":"base for a while after being hired um and I'm currently working on the onboarding team we're trying to solve","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=509s"},{"start_seconds":516,"text":"the issue of onboarding people with zero friction or as close to zero friction as possible uh I love JavaScript everything","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=516s"},{"start_seconds":523,"text":"JavaScript I'm kind of one of those one of those strange people who actually enjoys the pointy education language so I'm involved in everything JavaScript","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=523s"},{"start_seconds":531,"text":"across the ecosystem here if you go to as well hi guys Osman from Pagoda as well uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=531s"},{"start_seconds":540,"text":"currently working on tools at Pagoda before this I was working on your api.js and before that I was working on the wallet so yeah like a lot of clients a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=540s"},{"start_seconds":549,"text":"lot of Standards a lot of uh like uh apis and stuff like that that deal with linear protocol so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=549s"},{"start_seconds":556,"text":"nice to meet you guys awesome thank you all for for being here and for all the the work that went into","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=556s"},{"start_seconds":565,"text":"uh reviewing the the nap and and helping kind of iterate on this process all right so next I would like to introduce","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=565s"},{"start_seconds":573,"text":"the moderators that are here which is Vlad and myself so Vlad hello hey everybody yeah plus here you also","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=573s"},{"start_seconds":581,"text":"can see my handle a lot under for all nickname on GitHub and on sticker flow I'm I joined near quite early on one of","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=581s"},{"start_seconds":590,"text":"the first engineers at the team and since the time I've been involved in all the engineering tasks and lately I got","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=590s"},{"start_seconds":599,"text":"involved with the the small formal and scaling infrastructure like ecosystem","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=599s"},{"start_seconds":606,"text":"task which is the Delaware Gardens and nap specifically so doing all this work","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=606s"},{"start_seconds":614,"text":"to help us going and scale as much as possible and Ori awesome back to me uh yeah so I am","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=614s"},{"start_seconds":623,"text":"playing a moderator role in this process and yeah been super excited to just start seeing momentum you know of the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=623s"},{"start_seconds":631,"text":"working groups and the nests and the community groups and there's more to come so I'm looking forward to it all right so now I would love to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=631s"},{"start_seconds":639,"text":"introduce the author for the nip that we are discussing today which is Nip 413 so hello Phillip would you like to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=639s"},{"start_seconds":646,"text":"introduce yourself sure hey everyone um I'm Philip I've been at near for","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=646s"},{"start_seconds":653,"text":"I think going to a year and two months now um started working originally on the wallet code base","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=653s"},{"start_seconds":661,"text":"um did some work on the JS SDK launch and currently working with the 2nd so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=661s"},{"start_seconds":669,"text":"um yeah security awesome yeah thank you so much for submitting the net and excited to get to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=669s"},{"start_seconds":677,"text":"it and I also wanted to just highlight that if at any moments during the proceeding discussion uh if you have questions or feedback feel free to drop","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=677s"},{"start_seconds":686,"text":"them in the Q a button on the screen you can also add your comments in the chat box just make sure to select everyone because sometimes it defaults to just","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=686s"},{"start_seconds":694,"text":"the panelists and uh you can also raise your hand if you want to speak with that I am super excited to get into the next discussion","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=694s"},{"start_seconds":703,"text":"and we first will have the author uh Philip kind of present a summary of the nap and then from there we'll have the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=703s"},{"start_seconds":710,"text":"working group kind of uh discuss uh their findings and ultimately we'll get to the actual decision so with that uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=710s"},{"start_seconds":718,"text":"Philip would you like to tell us a little bit more about uh your neck why you believe it's important Etc sure","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=718s"},{"start_seconds":727,"text":"um so the this nip is basically proposed in like a standard for sign in messages um using a new account for a specific","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=727s"},{"start_seconds":735,"text":"receiver so the this actually came up from like a request to enable like a means of authentication for accounts","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=735s"},{"start_seconds":743,"text":"where that is not like results in in carrying any gas Visa having to be on chin so this um and you be basically","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=743s"},{"start_seconds":751,"text":"purposes that we add like a sign message interface to the wallet API that would allow daps sign specific messages","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=751s"},{"start_seconds":761,"text":"um for their like contacts um yeah there are a lot of things should I would I need to run through like some","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=761s"},{"start_seconds":769,"text":"of the things in the actual document or is that something we're going to run yeah so Daryl give us a summary of some of","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=769s"},{"start_seconds":777,"text":"the uh benefits and concerns story rates so um if there's anything else at a high level that you want to highlight feel free to but otherwise we can proceed","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=777s"},{"start_seconds":784,"text":"once you feel like you're good yeah I think at a high level that's that's exactly what it does um and so like in doing it we had to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=784s"},{"start_seconds":792,"text":"like make sure to factor in like all the security risks that could be introduced by like um making sure like people there's no","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=792s"},{"start_seconds":800,"text":"malicious um there's no opportunity for malicious actors to perhaps make people sign things that look like um just a message what are valid transactions","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=800s"},{"start_seconds":808,"text":"um also reduce the possibility of a replay attack where um people um the apps could potentially delay","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=808s"},{"start_seconds":816,"text":"um the signing of the message and potentially use that to stop like do things on people's accounts subsequently","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=816s"},{"start_seconds":823,"text":"or perhaps submit this for for the activity on the account subsequently to the blockchain so yeah I mean there will","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=823s"},{"start_seconds":831,"text":"dive into more detail but at a summary that's some of the things we talk about when coming up with this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=831s"},{"start_seconds":838,"text":"awesome cool thank you so much for that summary and again for our first submitting the snap next I'd love to uh get into the actual","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=838s"},{"start_seconds":847,"text":"uh overview from uh from Daryl on the benefits and the concerns that we saw and just for context for anyone who","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=847s"},{"start_seconds":854,"text":"might be new to this call and this format uh that everyone has spent time like including the community going through the nap discussing it on GitHub","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=854s"},{"start_seconds":863,"text":"and so what we're doing here is we're summarizing all of that activity that's that has happened asynchronously um and you can definitely follow along","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=863s"},{"start_seconds":871,"text":"as well on the net itself which is linked to the invite so with that Daryl hello","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=871s"},{"start_seconds":879,"text":"good stuff um so benefits for this one are pretty uh pretty huge actually from the ecosystem perspective","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=879s"},{"start_seconds":886,"text":"um one of the biggest things that people have had a had a issue with on our current signing in process for logging into a d app is the fact that there's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=886s"},{"start_seconds":895,"text":"always a side effect there's an on-chain side effect to logging in and one of the biggest benefits that we get from this approach is that there is no on-chain","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=895s"},{"start_seconds":903,"text":"transaction executed so you can authenticate somebody without adding an access key to their account and this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=903s"},{"start_seconds":911,"text":"means that you don't have to pay for storage for an access key um this is a huge benefit for folks who have very little near in their account","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=911s"},{"start_seconds":919,"text":"and they're not looking to lock up additional near uh holding an access key and in some cases actually the apps have","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=919s"},{"start_seconds":926,"text":"been written that don't actually need a limited access key a really obvious case for this is some defy apps every time you need to do something you actually","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=926s"},{"start_seconds":935,"text":"need to sign it with a full access key to transfer some wealth around right you have some value and having somebody add a limited access key for a smart","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=935s"},{"start_seconds":943,"text":"contract that you can't even call without uh having a full access key is just confusing to the user uh people have a it's kind of a dark pattern on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=943s"},{"start_seconds":952,"text":"the user side of things because you end up with uh an approval for a sign in where it tells people that they can call a method on a smart contract that might","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=952s"},{"start_seconds":960,"text":"not even exist and it means that there is an overhead on signing in that requires that somebody has near","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=960s"},{"start_seconds":968,"text":"available on their accounts that is burned in gas and also some amount that is then staked onto this chain uh to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=968s"},{"start_seconds":976,"text":"store this limited access key and if the user then deletes the limited access key later uh you know it's confusing to the user as to whether or not that will","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=976s"},{"start_seconds":984,"text":"impact their usage of the app if I remove that limited access key will I no longer be able to use that defy app well actually no you'll be you'll be fine because every transaction goes through a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=984s"},{"start_seconds":993,"text":"full access key anyway so it eliminates a lot of dark patterns in the onboarding experience for somebody people signing in and it makes it so that there won't","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=993s"},{"start_seconds":1002,"text":"be unnecessary gas burned on chain in order to authenticate that somebody owns a given your account and it also is kind","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1002s"},{"start_seconds":1009,"text":"of convenient that it it would apply for an implicit ID that you may not actually have even created on chain uh this can","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1009s"},{"start_seconds":1016,"text":"be used to to verify that you own any full access key for an account regardless as to whether or not it exists","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1016s"},{"start_seconds":1023,"text":"uh this is also a really nice thing because it allows us to implement uh authentication using JWT or a web authen","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1023s"},{"start_seconds":1031,"text":"type of uh challenge uh signing response so you don't actually have to use a transaction like an oracle that is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1031s"},{"start_seconds":1039,"text":"the chain in order to verify something you get a signed message you verify that it's signed with the key that that it says that it was and you can treat that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1039s"},{"start_seconds":1047,"text":"as an authenticated login for an app that actually doesn't use the chain yet it's very useful for a progressive onboarding where somebody may actually","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1047s"},{"start_seconds":1055,"text":"have access to an app as an identity but until they actually deposit some near and want to interact with it in a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1055s"},{"start_seconds":1062,"text":"privileged way they don't need to worry about what that means for an on-chain account uh depositing funds Etc","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1062s"},{"start_seconds":1070,"text":"and it also removes any kind of uh block delays now this is kind of a funny one because you know block times on your are","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1070s"},{"start_seconds":1078,"text":"incredibly low uh transaction execution does not take a long time but it does mean that signing in doesn't involve uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1078s"},{"start_seconds":1086,"text":"waiting for finality on a on a transaction on the Chain uh it makes error handling simpler you don't have to worry about oh this transaction failed","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1086s"},{"start_seconds":1093,"text":"for some reason let's say you couldn't access our PC this doesn't require RPC actually so there is no dependency on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1093s"},{"start_seconds":1100,"text":"external uh Network requests there doesn't have to be a a access key added to the account so it eliminates a little","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1100s"},{"start_seconds":1108,"text":"bit of a delay there and simplifies the the mental model for any Engineers who are building on this stuff if you're building a forum let's say that you want","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1108s"},{"start_seconds":1116,"text":"to authenticate people that they own in your account but they don't necessarily submit transactions against that in your account you just want to use near for","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1116s"},{"start_seconds":1124,"text":"identity this is a really nice benefit to having this kind of assigning functionality where you can verify that somebody owns the account without having","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1124s"},{"start_seconds":1131,"text":"to wait for a transaction and write the code that pulls hey that transaction succeed or fail what was the results of it uh that kind of thing","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1131s"},{"start_seconds":1140,"text":"so those are the high level benefits uh and on the drawback side of things uh we have a totally a separate slide here that goes through the drawbacks or the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1140s"},{"start_seconds":1148,"text":"concerns I should say are blockers most of these have been resolved so we've had really Lively discussion on the pull request I have to thank everybody who's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1148s"},{"start_seconds":1157,"text":"been involved in the discussions this has actually been quite a quite a journey from its original concept the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1157s"},{"start_seconds":1164,"text":"original concept was very tightly scoped to a verifying ownership on the account and this is a much more generic approach that I think people will find more","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1164s"},{"start_seconds":1171,"text":"useful and the the major things that that were concerns were that there will","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1171s"},{"start_seconds":1178,"text":"be a possibility where there could be a division in support if a certain wallet does not implement this new part of the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1178s"},{"start_seconds":1185,"text":"standard then this could penalize a wallet that uh otherwise would have users logging in to a d app if the d-app","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1185s"},{"start_seconds":1194,"text":"only allows logging in Via this new method then there will be a split which login which wallet can I I log in with to this to this particular D app well","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1194s"},{"start_seconds":1203,"text":"you can only log in to that D app with a wallet that supports the new uh extension to The Standard","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1203s"},{"start_seconds":1211,"text":"um this is definitely a concern uh our our recommendation is that the apps should have a a happy fallback where if","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1211s"},{"start_seconds":1220,"text":"somebody wants to choose to use a wallet that actually adds a full access key or a limited access key then that could be an alternative way to sign in there's no","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1220s"},{"start_seconds":1228,"text":"requirement that this is the only way to sign in but the user of course is going to see that extra friction they're probably going to put pressure on their wallet Implement her to go hey why don't","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1228s"},{"start_seconds":1237,"text":"you support this functionality uh and it should motivate motivate those wallets to implement the easier lower friction way of signing in","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1237s"},{"start_seconds":1246,"text":"the uh the idea that uh wallets are obliged to implement the the standards is also one that we that we talked about","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1246s"},{"start_seconds":1254,"text":"so in in order to be listed in wallet selector there's some requirements uh around uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1254s"},{"start_seconds":1262,"text":"Security reviews and implementation of basic apis that the wallet selector has to use and at some point here this new","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1262s"},{"start_seconds":1271,"text":"functionality this new API call can be required uh to implement or to support a wallet in wallet selector","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1271s"},{"start_seconds":1278,"text":"that would add a an extra API call that is the base standard API that wallets need to implement into their support for","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1278s"},{"start_seconds":1287,"text":"wallet selector in order to be listed in the the list of wallets that you can log into using wallet selector so this can","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1287s"},{"start_seconds":1294,"text":"uh provide a little bit of a nudge towards the the wallets to say if you want to be listed in wallet selector the whole point of wallet selector being an","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1294s"},{"start_seconds":1302,"text":"easy way of providing a compatibility layer for all the wallets in the ecosystem to be able to work in a consistent way then you need to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1302s"},{"start_seconds":1310,"text":"implement this API in addition to the ones that you had implemented in the past and the the second major concern","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1310s"},{"start_seconds":1318,"text":"was well by removing the sign in creating an on-chain key where reducing the number","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1318s"},{"start_seconds":1325,"text":"of transactions that happen on chain so right now every time somebody signs into a DX there's a transaction submitted on chain that has an access key to their","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1325s"},{"start_seconds":1334,"text":"account to prove that they own that account and if everybody started using sign message then there would be less","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1334s"},{"start_seconds":1342,"text":"transactions on chain and this is a true this is true however we're","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1342s"},{"start_seconds":1349,"text":"we're not trying to index towards usage of the chain on authentication you know as it requires as a benefit towards the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1349s"},{"start_seconds":1357,"text":"the chain or as a driver for train on chain usage on-chain usage should be driven by organic usage that's necessary things that actually make a difference","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1357s"},{"start_seconds":1365,"text":"transactions that are valid that add some kind of value to the user that need an interaction with the blockchain and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1365s"},{"start_seconds":1373,"text":"there's there was some discussion about this but the general uh consensus was that this is a a good way to be moving there is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1373s"},{"start_seconds":1381,"text":"there is a reduction in transactions but also it's also worth considering that most d-apps or many D apps still will","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1381s"},{"start_seconds":1390,"text":"need a limited access key to give you a smooth interaction with their smart contract with background transactions that you pay gas for without having to constantly be interacting with the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1390s"},{"start_seconds":1398,"text":"wallet uh this is a different way of authenticating that will likely apply to a subset of apps anyway if you need to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1398s"},{"start_seconds":1407,"text":"be able to submit transactions with a limited access key then you'll continue to use the other API and the user will still get a limited access key and it'll","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1407s"},{"start_seconds":1414,"text":"make sense to them why they're getting one because they're using a d-app that uses transactions on chain so this will simply simplify the mental model for","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1414s"},{"start_seconds":1422,"text":"users as well uh third one was one that I had actually brought up in uh my final review of the NEP which is currently signing a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1422s"},{"start_seconds":1431,"text":"transaction as a receiver ID that's used a receiver of the transaction the Target that the transaction executes against","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1431s"},{"start_seconds":1438,"text":"and receiver is a key on this payload that is being provided to the wallet to be","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1438s"},{"start_seconds":1446,"text":"signed as a message so there's some uh similarity in terminology but a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1446s"},{"start_seconds":1453,"text":"difference in logical meaning between these things because receiver in this NEP is really it's the requester or the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1453s"},{"start_seconds":1462,"text":"origin of the request there's not a smart contract online that receives this there is no transaction so having the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1462s"},{"start_seconds":1470,"text":"name of a receiver if somebody is looking through a near documentation they may pull up the signed transaction documentation and right next to it the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1470s"},{"start_seconds":1478,"text":"sign message from documentation and it could be easy for them to conflate the two or get confused about the difference between the two well how is time message","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1478s"},{"start_seconds":1487,"text":"receiver not like signed transaction receiver isn't it an account isn't it a transaction uh it adds if you're doing Search terms searches you know indexing","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1487s"},{"start_seconds":1496,"text":"via Google or something or looking for um posts on stack overflow low you're going to get interleaved data depending","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1496s"},{"start_seconds":1503,"text":"on which trial which kind of an API call you're looking at and my suggestion here was can we just change the name of","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1503s"},{"start_seconds":1510,"text":"receiver instead of having receiver let's call it something that is more specific to this API which is my","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1510s"},{"start_seconds":1518,"text":"suggestion was requester or actually if we want to be uh even more generic earlier I was talking about the implementation of web often or JWT we","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1518s"},{"start_seconds":1528,"text":"could use origin which is what web authent uses uh as its challenge it uses typically origin is the domain that the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1528s"},{"start_seconds":1537,"text":"request is coming from and we will probably have a similar kind of a pattern in this usage of this feature","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1537s"},{"start_seconds":1545,"text":"where oftentimes the receiver would have been the domain that it came from if you own a d app on that has its own domain or it might be a string that somebody","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1545s"},{"start_seconds":1553,"text":"comes up with on themselves you know my app my awesome app you know whatever that might be so that was my suggestion was that we just made a slight tweak to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1553s"},{"start_seconds":1562,"text":"the API so that we don't have this similar but different kind of a argument","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1562s"},{"start_seconds":1569,"text":"and as a result we separate out the documentation concerns and the mental model is easier for people to understand this is signing a message somebody","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1569s"},{"start_seconds":1577,"text":"requests that you sign the message that comes from somebody it's not a target of a transaction that you're signing uh that's currently unresolved and that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1577s"},{"start_seconds":1586,"text":"I didn't see uh some feedback on the final review for me this is not a blocker this is not something that I would vote against the NEP if we don't","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1586s"},{"start_seconds":1594,"text":"change it but it feels like a really low friction change something that's trivial for us to modify since nobody has implemented the spec and I think it","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1594s"},{"start_seconds":1602,"text":"would be helpful just from a a a conceptual standpoint for those who are understanding how this works","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1602s"},{"start_seconds":1609,"text":"um the other one was uh brought up I believe actually by Osman and that is the NEP should emphasize that nonce and receivers should be displayed to the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1609s"},{"start_seconds":1618,"text":"user in signing requests by wallets so if a wallet receives an IPI call for this sign message Api on the screen that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1618s"},{"start_seconds":1627,"text":"the wallet displays we want the wallets to be encouraged strongly to show the user relevant information","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1627s"},{"start_seconds":1635,"text":"that lets them understand what they're signing and why they're signing it and by including the nonce and the receiver","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1635s"},{"start_seconds":1643,"text":"both in that information we show the user context that they can use to understand do I want to sign this message is this a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1643s"},{"start_seconds":1652,"text":"safe message to sign uh and who who is the person who's requesting this message nonce is very important from a security","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1652s"},{"start_seconds":1659,"text":"standpoint to avoid replay attacks you want the nons to be unique each time there's a signing request and it is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1659s"},{"start_seconds":1665,"text":"possible that somebody could implement a d-app that uses this API in an insecure","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1665s"},{"start_seconds":1674,"text":"manner they could use nonsense that are not unique and if they did that then we could run into a situation where security of this functionality is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1674s"},{"start_seconds":1682,"text":"compromised you don't want to be signing multiple requests with the same nonce uh this is a a bad idea cryptographically","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1682s"},{"start_seconds":1689,"text":"you want nonsense to be unique the whole point of nons is number only used once you want that to be one and only one usage if you have people signing","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1689s"},{"start_seconds":1698,"text":"messages that have the same Noms over and over things get really freaky from a security standpoint you can end up","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1698s"},{"start_seconds":1705,"text":"compromising your actual full access key um the underlying key that you're using to sign them so it could be helpful to show nonsense just so that the user","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1705s"},{"start_seconds":1714,"text":"could say I've already signed a message with this month I don't want to cite another message with this nonce it would be up to the user to keep track of these","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1714s"},{"start_seconds":1722,"text":"things which this is the kind of um uh discussion about like well is this is this noise to the user is this helpful to the user the user would have to be","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1722s"},{"start_seconds":1731,"text":"paying attention to this and they would have to know that they'd sign things repeatedly with the same nonce um however that was the the reason for","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1731s"},{"start_seconds":1738,"text":"this concern was it can compromise the security of the of the signing if you sign a bunch of messages with the same nonce over and over","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1738s"},{"start_seconds":1747,"text":"um and the last thing was uh not really uh a concern or a blocker actually it's the fact that we should extend our","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1747s"},{"start_seconds":1756,"text":"injected wallet API to document this new method right the injected wallet API is what most people are using in the wallet","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1756s"},{"start_seconds":1763,"text":"ecosystem currently to implement extensions and in fact some people have used the injected wallet API with like a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1763s"},{"start_seconds":1770,"text":"bridge to implement against uh wallet API wallets that are web wallets so we should we should update the injected","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1770s"},{"start_seconds":1778,"text":"wallet API once this has been approved to describe how the signed message should be implemented in injected wallets and that's true we absolutely","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1778s"},{"start_seconds":1786,"text":"should but it's also out of scope for the approval of the underlying NEP that we're talking about which is this API should sign message exist as a defined","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1786s"},{"start_seconds":1794,"text":"uh interface that people can implement so that was uh resolved","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1794s"},{"start_seconds":1803,"text":"so at a high level I think um the main things would be at this point discussion around um voting there's I've noticed there's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1803s"},{"start_seconds":1811,"text":"been some mentions in the chat uh from folks that are saying let me just bring to attention the comments from the chat so for example","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1811s"},{"start_seconds":1820,"text":"listeners uh that we are on the same page so jalarma commented that uh the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1820s"},{"start_seconds":1827,"text":"following I do agree with changing the receiver for another name but I do not like the requester or region since they","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1827s"},{"start_seconds":1834,"text":"talk from the respect perspective of the person receiving the message I would instead propose recipient I'm sending it","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1834s"},{"start_seconds":1842,"text":"to someone which is perpendicular to somebody asked it to me it from me","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1842s"},{"start_seconds":1848,"text":"uh what do you think uh is there a do you think it's worse to discuss","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1848s"},{"start_seconds":1855,"text":"um this like naming um during the call or maybe we take it offline uh uh what","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1855s"},{"start_seconds":1863,"text":"do you think they're all Osmond Cameron so personally I don't have a strong opinion around around the exact wording my main my main goal is to not have the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1863s"},{"start_seconds":1872,"text":"exact same wording as the signed transaction I'm totally fine with recipient as a as an idea instead","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1872s"},{"start_seconds":1879,"text":"uh origin was mainly as uh a benefit in my mind and that it overlaps with web often so since this pattern is basically","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1879s"},{"start_seconds":1887,"text":"the same as a web authent authentication uh it seemed like it might help people kind of build a mental model of how this works in a familiar way if they've","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1887s"},{"start_seconds":1895,"text":"implemented web often before but I don't have a I think recipient could work just fine on on my side I don't have an objection there","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1895s"},{"start_seconds":1904,"text":"um I think um like receiver and requests are sort of pretend or or hint that it's in their account ID where","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1904s"},{"start_seconds":1912,"text":"um like I don't think it's necessarily A near account ID in this case right so like I like origin a bit um more and I think receiver also implies that like","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1912s"},{"start_seconds":1921,"text":"we're sending a transaction as well like like Daryl pointed out um so so those were those could be the things that we think about will come up with the naming here like","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1921s"},{"start_seconds":1929,"text":"um that this doesn't need to be in your account ID it could be like a website it could be anything and then the second thing is like um we're not sending a transaction here right so like you","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1929s"},{"start_seconds":1938,"text":"wouldn't complete that with other uh send transaction methods sorry about the background I'm completely out of scope here but","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1938s"},{"start_seconds":1947,"text":"maybe a referral is uh something that we can reuse from the web world of web to world is that the term we are looking","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1947s"},{"start_seconds":1955,"text":"for I think referrer would might confuse people as well uh because they usually refer as a domain uh you know people","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1955s"},{"start_seconds":1963,"text":"think about that on the request side of things on the browser uh apis and in this case it's it's going to be an arbitrary","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1963s"},{"start_seconds":1971,"text":"string we're not requiring that it is a domain it could it could be you know by the name of my D app actually","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1971s"},{"start_seconds":1979,"text":"um that's one of the reasons why I'm kind of hesitant to use origin as well because origin in web in web authen really is the domain that things are","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1979s"},{"start_seconds":1986,"text":"coming from it's almost I think it's actually even articulated in some of the specs that it should be the uh the domain and that's not always going to be","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1986s"},{"start_seconds":1995,"text":"the case for D apps you know if you have multiple D apps in the same domain then they should actually have different origins or different uh requesters so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=1995s"},{"start_seconds":2005,"text":"it's this is a kind of a tricky thing my my I don't have a strong opinion about where we go other than I think we shouldn't have it be the same thing as","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2005s"},{"start_seconds":2012,"text":"signed transaction um okay well do we want to uh continue","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2012s"},{"start_seconds":2025,"text":"discussing this part or maybe table in it to the end uh do you think this is like blocking us from moving forward with a decision or at this point","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2025s"},{"start_seconds":2037,"text":"uh that's not a blocker for me I do like what Guillermo is saying about the word recipient","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2037s"},{"start_seconds":2043,"text":"um it does I think help clarify a lot of things but I don't think this is I think this could be formalized uh office call and shouldn't necessarily be blocking","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2043s"},{"start_seconds":2052,"text":"the decision okay um maybe um Guillermo if you're up for it maybe we can come back to it just to make sure we get through the the rest of the call","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2052s"},{"start_seconds":2060,"text":"but like I'd love to uh yeah if we have time we can maybe take you know uh have a five minute sidebar at the end uh or","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2060s"},{"start_seconds":2067,"text":"we can continue it uh yeah on the nip itself that's a great idea as well so I feel like we could do a uh just a final","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2067s"},{"start_seconds":2075,"text":"vote on the NEP itself for the people who've been contributing and get a get a you know ABC here are three options and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2075s"},{"start_seconds":2082,"text":"see see which one wins great thank you awesome and then uh was there another comment Vlog that you wanted that that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2082s"},{"start_seconds":2091,"text":"you thought was relevant uh I saw Paul it was who was I think I saw on I'm scrolling back I I think it was Paul","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2091s"},{"start_seconds":2100,"text":"um who commented the following uh I think nonce will not be easy comprehensible from the general user perspective is it just a bunch of random","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2100s"},{"start_seconds":2108,"text":"bytes kind of hard to keep track of the human reading the interface and I tend","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2108s"},{"start_seconds":2115,"text":"to agree and I think well they're all you what what you just brought here is that like we assume uh humans like users","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2115s"},{"start_seconds":2124,"text":"would need to be in charge of checking that they are not signing the same nons again we probably can have a like a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2124s"},{"start_seconds":2133,"text":"cached uh list of used nonses uh with exploration in local storage and that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2133s"},{"start_seconds":2141,"text":"would be it's um so David actually brought a good point on the pr um when we were talking about this and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2141s"},{"start_seconds":2148,"text":"um the nonce the purpose of the nonce is actually to for the caller so so that the caller um so that the the the the wallet or the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2148s"},{"start_seconds":2157,"text":"user doesn't actually resend a signed message that the caller requested earlier so that's I think that was the main idea behind it but this is a secondary idea as well where uh the user","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2157s"},{"start_seconds":2165,"text":"doesn't send doesn't sign a multiple of the same nonsense so uh but the main purpose of the nonce is actually so that the caller","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2165s"},{"start_seconds":2174,"text":"um doesn't receive a sign an already signed message that's um that's signed with a different notes or or delayed or like let's say","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2174s"},{"start_seconds":2183,"text":"the caller asks for a signature and then um the user um like keeps that signed message and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2183s"},{"start_seconds":2191,"text":"then resends it if there was no Nots then like the koala wouldn't be able to tell the difference between the two signed messages so that was the replay attack that um the NEP","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2191s"},{"start_seconds":2199,"text":"author had in mind I think yeah that's definitely true so there's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2199s"},{"start_seconds":2207,"text":"two different concerns one is replay attacks and then the other one is the security of signing many things with the with the exact same nonce and the same","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2207s"},{"start_seconds":2215,"text":"key being a security uh concern um I I actually really like that idea of Vlad that the wallet itself could be","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2215s"},{"start_seconds":2223,"text":"encouraged to keep track of nonsense that are signed with a particular key because the wallet knows","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2223s"},{"start_seconds":2230,"text":"the key that's being used to sign the transaction or sorry the message in this case and the wallet could actually ball","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2230s"},{"start_seconds":2238,"text":"at signing the same uh multiple messages with the same nonce I actually would be a big fan of just","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2238s"},{"start_seconds":2245,"text":"adding that as um some wording to the NEP that says we encourage the question then becomes is it a requirement for implementation or is it a strongly","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2245s"},{"start_seconds":2253,"text":"encourage uh Implement that be implemented for the wallet","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2253s"},{"start_seconds":2262,"text":"yeah I think I think it would have to be strongly encouraged at least it's like um it's like it would have to it would have to keep track of the same","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2262s"},{"start_seconds":2271,"text":"nonsense for a receiver right so it's like if if it gets the same non-sport this particular um requester","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2271s"},{"start_seconds":2278,"text":"um then then it rejects but then if it gets the same knowledge but for another requester then it's fine","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2278s"},{"start_seconds":2286,"text":"yep I think we should add that to the wording I think that would be awesome uh you know the wallet should we should reject multiple messages for the same","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2286s"},{"start_seconds":2294,"text":"recipient that have the same logs uh how much they're able to persist I mean this is obviously a scalability thing can you","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2294s"},{"start_seconds":2302,"text":"keep a log of absolutely every single one and there's concerns around well what if you're on two different machines uh but you know best effort on the on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2302s"},{"start_seconds":2309,"text":"the wallet side all of those are implementation details perfect um who is going to take that action is","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2309s"},{"start_seconds":2317,"text":"it going to be fill up as the author you're going to go and incorporate that","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2317s"},{"start_seconds":2325,"text":"awesome thank you and then yeah just for we definitely will post this call as well but I guess um you know whoever has","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2325s"},{"start_seconds":2333,"text":"spoken today I think Paul Guillermo feel free to also add your comments on the nap just again we want to make this create visibility you know we know that there are a lot of time zones so not","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2333s"},{"start_seconds":2341,"text":"everyone can attend the call so we just want to make it really fair and transparent so but really appreciate all of the input and and the summary Daryl","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2341s"},{"start_seconds":2349,"text":"that you gave on the concerns and I think now that we've heard uh all of those I'd love to now hand it over to each uh working group member to present","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2349s"},{"start_seconds":2358,"text":"their opinion how you're leaning uh which that which brings us to the voting stage of the call so who would like to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2358s"},{"start_seconds":2366,"text":"go first I go so yeah cltr uh I support this as a user","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2366s"},{"start_seconds":2376,"text":"of a lot of newer apps uh I'm always looking for better ways to streamline The Experience um I also think that this is going to be","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2376s"},{"start_seconds":2383,"text":"you know really helpful for a lot of dap developers to uh help with uh connecting with I guess yeah extremely experience","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2383s"},{"start_seconds":2391,"text":"with other wallets removing the delay for users uh Progressive onboarding we talk a lot about in our wallet Builder groups","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2391s"},{"start_seconds":2398,"text":"um an exciting easier overall like this is almost a no-brainer uh for me so it's a yes for me and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2398s"},{"start_seconds":2407,"text":"yeah I don't know if you have any other questions uh about my thoughts feel free to just at me in the GitHub repo","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2407s"},{"start_seconds":2416,"text":"yeah I could pass it on to awesome okay um so yeah for me I vote Yes as well I think it's like this is a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2416s"},{"start_seconds":2424,"text":"different function from like access key Edition and the fact that access key Edition has been is being used for this um like it's because we don't have","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2424s"},{"start_seconds":2433,"text":"standards for it yet so this is the right way to approach it and it's a completely different functionality and it's I think been widely requested and so yeah","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2433s"},{"start_seconds":2441,"text":"definitely yes good stuff well I'm also inclined to vote Yes for this I think it's a huge Improvement uh as far as capabilities","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2441s"},{"start_seconds":2451,"text":"for the apps that don't require limited access keys and I think it'll eliminate some dark patterns on the intro","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2451s"},{"start_seconds":2460,"text":"all right awesome so I am hearing a unanimous uh consensus it seems like and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2460s"},{"start_seconds":2468,"text":"uh with that seems like this uh NEP is officially approved by the working group members yes and I","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2468s"},{"start_seconds":2477,"text":"just saw Shop's message is this another pass another net three in less than a week yes I can't believe it either you know when I first joined uh several","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2477s"},{"start_seconds":2485,"text":"months ago you know there were some nips that were just kind of hanging out for several months and it took a lot of time and effort to even just get one pass so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2485s"},{"start_seconds":2494,"text":"this is definitely um you know representative of every single action that that everyone on this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2494s"},{"start_seconds":2501,"text":"call including the attendees uh have taken just to kind of help align so thank you super exciting and thank you","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2501s"},{"start_seconds":2508,"text":"Philip again but before we go to thank you the next steps yeah actually let's talk about next steps so uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2508s"},{"start_seconds":2516,"text":"uh Daryl or Vlad can one of you stick to this or anyone else","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2516s"},{"start_seconds":2525,"text":"absolutely so all the wallets you're going to need to implement against this uh API and this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2525s"},{"start_seconds":2533,"text":"actually dovetails very well with our earlier concern of the injected wallet standards should have this added to it so that people know what to end to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2533s"},{"start_seconds":2541,"text":"actually Implement against so as soon as this has been approved and merged we're going to want to have a follow-up that adds this to the injected wallet","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2541s"},{"start_seconds":2549,"text":"standard I don't think that needs to go through a major uh review process because it's an implementation of this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2549s"},{"start_seconds":2556,"text":"NEP which we've already reviewed and approved so that can be I I'm happy to follow up","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2556s"},{"start_seconds":2563,"text":"on the injected wallet and just get that PR created that actually has a proof of concept of this so people know what to implement and once that's been merged","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2563s"},{"start_seconds":2572,"text":"then uh it needs to be broadcasted into wallet teams so all of the people that are in the wallet Builders groups in","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2572s"},{"start_seconds":2580,"text":"telegram that would be the obvious uh audience for this people who are building wallets need to be made aware that we have updated the injected wallet","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2580s"},{"start_seconds":2589,"text":"standard and that they should implement this stuff into the injected wallet standard uh that they've uh that they've conformed with on their existing","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2589s"},{"start_seconds":2598,"text":"wallet implementations that's something that uh maybe I'm not sure who would be the best person to to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2598s"},{"start_seconds":2605,"text":"socialize that there maybe Cameron yep we actually have a call in 15 minutes with a bunch of wall Builders so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2605s"},{"start_seconds":2612,"text":"we can get that moving ASAP good stuff so once we've told them about","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2612s"},{"start_seconds":2619,"text":"that then the wallet teams themselves are going to go through and just add support for the sign message which will be a little UI that responds to this new","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2619s"},{"start_seconds":2627,"text":"API call that shows the user that they're signing a message it can explain to the user that they're not executing on chain transaction maybe give them a","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2627s"},{"start_seconds":2634,"text":"little bit of information about why they're signing a message it's verifying that they own the account and they will Implement that and release it into","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2634s"},{"start_seconds":2642,"text":"production and as they do that they will then update their corresponding wallet implementation in","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2642s"},{"start_seconds":2651,"text":"the wallet selector package so wallet selector is the central place where everybody implements or ties their","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2651s"},{"start_seconds":2659,"text":"wallet implementations to the actual client that the app developers use so once the wallet team is updated their","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2659s"},{"start_seconds":2666,"text":"wallet to support this API they will open a pull request against the wallet selector repository that updates the the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2666s"},{"start_seconds":2673,"text":"ads to their Plugin or their module the support for this uh this method the sign message method","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2673s"},{"start_seconds":2684,"text":"awesome cool yeah and uh one new thing that we've been adding to naps is also yeah summarizing the benefits and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2684s"},{"start_seconds":2692,"text":"concern section in the nap itself so Philip I can reach out to you to see if you want to partner on that uh and I can share with you an example from another","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2692s"},{"start_seconds":2701,"text":"nap but yeah are there any other comments just the next steps okay","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2701s"},{"start_seconds":2709,"text":"cool so I just wanted to open it up to q a um does anyone have any questions or feedback just on the overall process and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2709s"},{"start_seconds":2719,"text":"the call definitely would love to hear while we're waiting for other comments I","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2719s"},{"start_seconds":2726,"text":"just want to communicate back the chat um message it there so there was a background conversation uh continuing on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2726s"},{"start_seconds":2735,"text":"the receiver naming and my proposal was that we could have actually two","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2735s"},{"start_seconds":2743,"text":"terms one for devs which we would call a region and another for regular users on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2743s"},{"start_seconds":2750,"text":"the wallet interface and we can easily also communicate it with the within the map and that would probably solve it","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2750s"},{"start_seconds":2758,"text":"again our problem right now but uh that's just the proposal I think","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2758s"},{"start_seconds":2766,"text":"we'll uh have it over the GitHub discussion anyway um so feel free to chip in","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2766s"},{"start_seconds":2776,"text":"awesome so we did get just a comment from Guillermo so happy to see the snap moving forward the new wallet is about to get even more awesome and yeah that's","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2776s"},{"start_seconds":2785,"text":"super super great so uh cool with that I'd love to just quickly talk about ways","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2785s"},{"start_seconds":2792,"text":"that all of you anyone on this call can get involved further so um if you uh have an idea that you want to","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2792s"},{"start_seconds":2801,"text":"get integrated um if you just have a general idea that you want to collaborate with others around you can use the dev gigs board as","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2801s"},{"start_seconds":2808,"text":"I discussed to post that there you can also add solution implementation proposals Etc if you have an idea that you want to get integrated across the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2808s"},{"start_seconds":2816,"text":"ecosystem that's where you also need to submit a nap or also if you want to seek funding","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2816s"},{"start_seconds":2823,"text":"and then if you want to see all of the existing naps discussions that are going on you can check out the kanban board on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2823s"},{"start_seconds":2832,"text":"GitHub that shows all of the the nips by each working group so you can filter it down to the wallet standards group and","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2832s"},{"start_seconds":2838,"text":"see all those depths and then of course there are there are Community groups so there's the near wallet Builder group that actually Cameron and Sean have been","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2838s"},{"start_seconds":2847,"text":"leading and it's been just getting a lot of activity and uh momentum I don't know if Cameron or truck you want to say","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2847s"},{"start_seconds":2855,"text":"anything give applaud uh absolutely so uh if you just go to nearhawks.com builders you can check out all of the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2855s"},{"start_seconds":2862,"text":"Builder groups that the Banyan team helps run uh well actually there's many of them on that list that we don't uh potentially run but","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2862s"},{"start_seconds":2870,"text":"the whole point here is if you're a founder or Builder focused on a certain vertical and you want to connect with other builders interested in that same article there is a weekly call for you","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2870s"},{"start_seconds":2879,"text":"to join there's an online community for you to like you know collaborate with and we unpack a lot of future standards","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2879s"},{"start_seconds":2886,"text":"here and get the feedback from the community on what they think about the standards before you would start drafting this as an NEP so","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2886s"},{"start_seconds":2894,"text":"um yeah joined it's totally accessible to all Builders now we did want to rename it wallet Builder Group after we named it originally wallet community","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2894s"},{"start_seconds":2902,"text":"group because we just had a bunch of people join that just say hey I'm part of the community uh these groups to be clear are for Builders and so if you're","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2902s"},{"start_seconds":2911,"text":"interested in uh building wallets and collaborating with other wallet Builders join that one we also run nft one Dao D5","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2911s"},{"start_seconds":2920,"text":"and that's pretty much it and so there's a bunch of other ones that you can join so next call is 10 minutes from now so uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2920s"},{"start_seconds":2928,"text":"we're shot by the way huge shout out to shot for putting all this a lot of this together uh wallet builders near builders.com too is a good place to go","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2928s"},{"start_seconds":2937,"text":"go so thank you Rory for giving me time there amazing yeah no this is great cool well","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2937s"},{"start_seconds":2943,"text":"uh so just uh if you want to learn more about developer governance please bookmark our website follow us on","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2943s"},{"start_seconds":2951,"text":"Twitter Telegram and yeah also there's a remind I wanted to give a reminder for the first tools","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2951s"},{"start_seconds":2958,"text":"working group which has happened in this Thursday we're actually going to be doing it in a slightly different time zone that's more accessible to our uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2958s"},{"start_seconds":2965,"text":"community in in Asia and parts of Europe so um if you happen to be available during that time would love to see you there uh","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2965s"},{"start_seconds":2973,"text":"and with that I would like to close by giving a humongous shout out to Philip for taking the time to write this nap","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2973s"},{"start_seconds":2980,"text":"and bring It Forward yes uh Daryl is is doing the hearts uh uh emoji with the hands uh which we all are we're very","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2980s"},{"start_seconds":2989,"text":"grateful um uh for for that and then the working group members Cameron Daryl Osman you took the time to also think through the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2989s"},{"start_seconds":2997,"text":"snap and add your perspective which were appreciate the subject matter experts Peter Paul who spent a great amount of effort as well thinking through the","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=2997s"},{"start_seconds":3005,"text":"benefits and the concerns which helped Daryl and the working group members also think further through this snip and then the community that was involved this","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3005s"},{"start_seconds":3013,"text":"Cameron already gave a shout out to Sean and I wanted to Echo that as well uh he's being very active especially like the wallet","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3013s"},{"start_seconds":3021,"text":"um the community groups and Beyond so super grateful and yeah with that I want to wish everybody a good week and give","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3021s"},{"start_seconds":3029,"text":"you some time back in case you want to prepare for that next call so thank you again and take care I think we from the comments we also","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3029s"},{"start_seconds":3037,"text":"want to give shout outs to guilmer who worked a lot and that it contributed to the snap","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3037s"},{"start_seconds":3044,"text":"so yeah one thanks for uh for the community to also recognize uh each","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3044s"},{"start_seconds":3051,"text":"other and definitely it's worth to uh get everybody to the same page and thanks","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3051s"},{"start_seconds":3058,"text":"to all this effort we we can move forward some kudos to everybody thanks","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3058s"},{"start_seconds":3065,"text":"yes cheers take care","url":"https://www.youtube.com/watch?v=Y6z7lUJSUuA&t=3065s"}],"youtube_url":"https://youtube.com/watch?v=Y6z7lUJSUuA","url":"https://near-pedia.xyz/videos/Y6z7lUJSUuA"}