We could extend this digital signature thing to also signing files, encrypting text/files/data with someone elses public key, and decrypting data with my own secret key.
So if someone wants to send me a large file and knows my nem address, he can encrypt it, send it over unsecure channel, dropbox or whatever and only i with my passphrase can decrypt it.
Would be an awesome feature ( in my view ) to have this in NCC in a simple gui, and all of the hardcore crypto stuff is already implemented anyway.
Oh yes! Now we're thinking alike! ;D
Glad people can understand what im trying to get out!
Anything that requires any type of authentication is able adapt to this system effortlessly.
Just download Nem Client, Setup a database to link profiles from blockchain to your own set of data! Once the user logs on the first time, the link is done!
I believe it should not be just a "click" at the provider's website. It doesn't make sense, security wise.
It's click inside the nem client, the picture i draw is suppose to be part of nem. when user views the profile and clicks on purchase, it should direct them to the marketplace inside nem.
i'm hoping to make this with less steps for the users.
1.user enters their account id+generated key into membership area as login and password
2.provider checks account id and verify generated key is made by such account in the range of 5blocks.(after 5blocks this key is unable to login) if anyone else somehow got this key, they are only able to login to providers membership content, they can't take anything from actual nem account.
3.provider checks for subscription validity, if true then access is granted.
Okay, i just found the flaw in the simpler universal login above.
Basically a phishing site could access to your 3rd party profiles but not your nem account.
Say we have a login for nem.forum.com
user: 11111 generated signature: 22222 acceptable time frame for validity:5mins
a phishing site like nem.f0rum.com can gather the same details within that 5mins frame once you logged in the phising site. a bot then can change your account details and take what ever they needed from that account.
And the worst part is that within that 5mins time, the phishing site now has access to all 3rd party services that you had used before with this nem account.
So how do we go about this problem without creating a more troubling authentication like the current nxt system?