New release: Wombat now offering whitelisting for transaction signing

Alexander Heckel
Sep 11, 2019 · 3 min read
Image for post
Image for post

As of release 1.0.12 we are excited to announce that Wombat offers whitelisting of trusted actions. Users can select specific actions to be whitelisted so they don’t have to sign them manually any longer. This features gives every user full control to decide when manual signing makes sense and when it limits the user experience — for example when playing a game.

Why does whitelisting matter?

Wombat is all about lowering the entry barriers for first-time EOS users and always optimizes for great user experience. As a result, we challenged the current dogma of asking the user to sign every transaction, no matter how repetitive or low-risk those are. Of course it is at the heart of blockchains to give proof of the users legitimacy by asking the user to sign the transaction with the correct private key. However, we believe that not every action should be treated as the equivalent of a 1 million EOS transfer. Many actions, especially in gaming dapps, are low risk, they do not have much at stake and are quite repetitive (and let’s be honest, sometimes annoying). These actions can now be whitelisted. As a result it is less disturbing and more fun to play games on EOS.

How can whitelisting be activated and managed?

Every time a dApp asks you to sign a transaction a small pop-up appears and outlines the transaction details (as shown in the screenshot below) as usual. From now on you have the option to check the box “whitelist transaction” before you sign it. Wombat then adds the respective action to the whitelist and will automatically sign the next transactions for you until you remove the permission. All whitelisted actions are grouped by their smart contracts and are listed in the settings section. You can easily remove individual actions, or multiple actions belonging to the same smart contract if you no longer want Wombat to sign them for you.

Image for post
Image for post

One cool aspect about the whitelist is that it is synced with your Wombat account. So every time you use another device your whitelist will already be there. For example, if you use our Google Chrome extension (coming soon) with the same account as on your mobile device you will also directly benefit from your whitelist settings.

Why is whitelisting in Wombat secure?

Building Wombat is all about a fun but secure experience, so we make sure that users are aware of what happens with their private key. Once you turn on the whitelist, Wombat will always inform you whenever it signs a transaction on your behalf. Of course you can disable these notifications at any time if you choose to.

Whitelisting is based on the action that is being executed, but it doesn’t consider the individual parameters within the action. So you either trust an action to be whitelisted or you don’t. Because of this we will always ask you to sign EOS transfers manually, guarding you against any dApp asking you to transfer your precious EOS without your consent.

Make sure to follow our twitter account for feature and partnership announcements. For any feedback and inquiries, our telegram community will be waiting for you!

Wombat Blog

Wombat | Blog

Medium is an open platform where 170 million readers come to find insightful and dynamic thinking. Here, expert and undiscovered voices alike dive into the heart of any topic and bring new ideas to the surface. Learn more

Follow the writers, publications, and topics that matter to you, and you’ll see them on your homepage and in your inbox. Explore

If you have a story to tell, knowledge to share, or a perspective to offer — welcome home. It’s easy and free to post your thinking on any topic. Write on Medium

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store