MetaMask / MetaMask/metamask-mobile
Improve NFT privacy
Open
@sethkfman is already working on this.
Since Jan 19, 2022.
needs-design
NFTs
- Dominant language
- TypeScript
- Stars
- 3k
- Forks
- 1.7k
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 669
Description
Issue to improve security and privacy regarding the loading of images in Collectibles.
DanF: We should only load NFT images from decentralized/static sources by default, and prompt a user to click "load image from [whatever].[com/net/etc]" before pinging centralized servers for auto-detected NFTs. We should either proxy image requests or “load on click”.
Tweet pointing the issue with NFTs images
Proposed solutions
- Improve UX to inform the users about the risk of loading images from centralized servers and giving them the option to opt out in autoloading the images.
- Develop an image proxy to protect the user's data and use the UX improvement as a fallback in case the proxy is down.
To consider
https://consensys.slack.com/archives/G4V2HTG0Y/p1626891700217800
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.