It stores a lot of metadata! Leaving it unencrypted in plaintext on disk does not seem to protect our users privacy by default.
This has become more important. Zaddrs and txids in this sentxstore are stored decrypted on disk, and another user on the same machine can easily use a bug to escalate permissions and read this file. It is not safe to have this senttxstore on a computer that it shared with others.
We could have users set a PIN which is required to open the wallet, which decrypts the senttxstore and maybe other config files. It's not perfect but moves the bar.
It stores a lot of metadata! Leaving it unencrypted in plaintext on disk does not seem to protect our users privacy by default.
This has become more important. Zaddrs and txids in this sentxstore are stored decrypted on disk, and another user on the same machine can easily use a bug to escalate permissions and read this file. It is not safe to have this senttxstore on a computer that it shared with others.
We could have users set a PIN which is required to open the wallet, which decrypts the senttxstore and maybe other config files. It's not perfect but moves the bar.
It stores a lot of metadata! Leaving it unencrypted in plaintext on disk does not seem to protect our users privacy by default.
This has become more important. Zaddrs and txids in this sentxstore are stored decrypted on disk, and another user on the same machine can easily use a bug to escalate permissions and read this file. It is not safe to have this senttxstore on a computer that it shared with others.
We could have users set a PIN which is required to open the wallet, which decrypts the senttxstore and maybe other config files. It's not perfect but moves the bar.